Senior Security Automation Engineer

ClickHouse

3d • $125,000 - $205,000 • Remote

About The Position

The Security organization at ClickHouse is built around a single mission: build customer trust through resilient, pragmatic security. We are establishing a new, centralized Security Automation capability—a dedicated function responsible for delivering automation work across all product lines and engineering dimensions at ClickHouse, acting as a technical force multiplier for our Security, Identity, and GRC functions. This capability exists to solve a real problem: as we scale and mature, we must move beyond manual evidence gathering, point-in-time audits, and disconnected identity workflows. We are creating a focused, empowered team that owns security and identity automation end-to-end—from architecture and design through to implementation and delivery.

Requirements

• Strong hands-on background in security automation and identity engineering (IAM/IGA).
• Strong proficiency in at least one commonly used programming language to build scalable automation. Experience with Python, JavaScript (TypeScript highly preferred), or Go is required.
• Experience building scalable and reliable automation ecosystems
• Familiarity with compliance automation, continuous control monitoring, and extending GRC tools to meet the granular requirements of a variety of compliance frameworks.
• Understanding of risks associated with change management, logical access, and data integrity.
• Demonstrated ability to translate complex security/GRC mandates into automated workflows and self-healing technical guardrails.
• Strong instincts for eliminating operational friction and the engineering "interruption tax".
• Experience delivering continuous data streams for security posture and risk validation.

Nice To Haves

• BS, MS, or PhD in Computer Science or related field.
• Previous experience at a cloud infrastructure, database, or developer tools company.
• Experience with AI/Agentic risk engines and non-deterministic risk assessments.

Responsibilities

• Build the Security Telemetry and Risk Fabric: Control Design, Security Telemetry, Custom Assurance Logic, Agentic Risk Engine.
• Architect Universal Identity and Access Automation: Universal Provisioning Connectors, Customer-Approved Access Workflows, Centralized Security Visibility, Automated Secret Discovery & Inventory, Eliminate "Ghost Accounts".
• Partner Across Security, Engineering and Product: Work in tandem with GRC, Finance, and Security to build custom, bulletproof automation for compliance with different audit frameworks. Eliminate the "Productivity Anchor" by removing manual provisioning workflows that slow down projects and flood teams with low-value administrative tickets.

Benefits

• Employer contributions towards your healthcare.
• Equity in the company - Every new team member who joins our company receives stock options.
• Flexible time off in the US, generous entitlement in other countries.
• A $500 Home office setup if you’re a remote employee.
• Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior