Senior Security Automation Engineer

Details

ClickHouse is establishing a centralized Security Automation capability to deliver automation across product lines and engineering functions, supporting Security, Identity, and GRC teams. The team will own security and identity automation end-to-end, from architecture and design through implementation and delivery.

Responsibilities

Build the Security Telemetry and Risk Fabric

• Translate control frameworks into layered control implementations that prevent risks and detect weaknesses in control design.
• Build a centralized security telemetry system that captures control evidence and health in real time.
• Develop custom assurance logic that continuously audits automated controls and extends visibility into proprietary applications and internal workflows.
• Partner with risk management to build secure, agentic risk-assessment workflows using collected data and results.

Architect Universal Identity and Access Automation

• Design provisioning connectors for systems without native identity governance and administration support, including proprietary databases, custom applications, and niche SaaS platforms.
• Build workflows that enable customer-approved, time-bound access for support teams to customer-specific instances, with automatic revocation.
• Consolidate access managed by disparate business units into an observable permissions inventory with authorization-level visibility across applications.
• Automate the discovery and inventory of secrets, credentials, and API keys, including aging and rotation intervals for long-lived keys.
• Automate de-provisioning for local identities, API keys, and persistent permissions to eliminate ghost accounts.

Partner Across Security, Engineering, and Product

• Work with GRC, Finance, and Security teams to build automation for compliance with different audit frameworks.
• Remove manual provisioning workflows that slow projects and create administrative tickets.

Requirements

• Strong hands-on experience in security automation and identity engineering, including IAM and IGA.
• Strong proficiency in at least one commonly used programming language for scalable automation. Python, JavaScript—with TypeScript highly preferred—or Go is required.
• Experience building scalable and reliable automation ecosystems.
• Familiarity with compliance automation, continuous control monitoring, and extending GRC tools for different compliance frameworks.
• Understanding of risks related to change management, logical access, and data integrity.
• Ability to translate complex security and GRC mandates into automated workflows and self-healing technical guardrails.
• Strong focus on reducing operational friction and engineering interruptions.
• Experience delivering continuous data streams for security posture and risk validation.

Bonus Qualifications

• BS, MS, or PhD in Computer Science or a related field.
• Experience at a cloud infrastructure, database, or developer tools company.
• Experience with AI or agentic risk engines and non-deterministic risk assessments.

Compensation

The typical starting salary in the United States is $125,000–$174,000 USD. In US premium markets, including the San Francisco Bay Area and New York City Metro Area, the typical starting salary is $157,000–$205,000 USD. Actual compensation depends on factors including education, qualifications, certifications, experience, skills, location, performance, and business needs.

Benefits

• Flexible, remote-friendly work environment.
• Employer healthcare contributions.
• Company equity through stock options.
• Flexible time off in the United States and generous entitlement in other countries.
• $500 home office setup allowance for remote employees.
• Opportunities to attend company-wide global gatherings.