• Define and execute the enterprise Cloud engineering and DevOps strategy aligned with Bridgeway’s business and technology objectives • Establish and maintain a multi-year roadmap for reliability, scalability, automation, CI/CD, and cloud modernization • Provide architectural leadership to ensure Cloud investments deliver measurable business value • Provide hands-on support as needed • Define and enforce Infrastructure as Code (IaC) standards using Terraform, ensuring consistent, repeatable, and auditable infrastructure deployments across all environments • Establish Terraform module libraries and governance practices to promote reusability, reduce configuration drift, and accelerate infrastructure provisioning • Lead the adoption of GitOps workflows for infrastructure management, integrating Terraform with CI/CD pipelines for automated plan, review, and apply processes • Lead the implementation and governance of secure networking solutions using modern VPN technologies such as Tailscale, WireGuard, and traditional IPsec tunnels • Partner with executive leadership to communicate Cloud strategy, progress, and outcomes • Oversee the design, implementation, and optimization of cloud infrastructure, CI/CD pipelines, and developer enablement Clouds • Establish KPIs and metrics to measure reliability, delivery efficiency, and Cloud maturity • Lead enterprise-wide standards, policies, and governance for Cloud and DevOps practices • Lead, mentor, and develop a team of Windows and Linux-focused engineers • Build a culture of accountability, continuous improvement, and operational excellence • Oversee talent strategy including hiring, performance management, succession planning, and career development • Foster a collaborative, inclusive, and high-performance engineering organization • Act as a primary escalation and decision authority for Cloud-related risks and challenges • Partner with Product, Engineering, Architecture, Security, and Business leaders to translate business needs into scalable technical solutions • Evaluate emerging cloud technologies and make architecture decisions aligned with business objectives • Oversee cloud cost management and budget optimization • Serve as a change agent, driving adoption of modern engineering practices and emerging technologies • Design and drive implementation of IP Address Management (IPAM) solutions such as NetBox, Infoblox, or AWS IPAM Services • Architect and manage multi-account (AWS) or multi-tenant (Azure) environments with complex interconnection and governance requirements • Lead migrations from traditional on-premises deployment patterns to leverage cloud-native services • Design and maintain Kubernetes environments with proper security controls, network segmentation, and namespace isolation • Partner with development teams to transition application deployments from traditional server installations to containers and serverless architectures • Interface with development teams to identify pain points and lead continuous improvement initiatives • Ensure Cloud availability, resilience, security, and compliance • Support security and compliance teams with evidence gathering and audit interviews for SOC 2 and similar frameworks • Design and maintain centralized logging configurations that aggregate and correlate system, application, cloud, and SaaS logsImplement advanced monitoring and alerting structures to ensure availability and assist development teams in identifying application errors and performance concerns • Troubleshoot complex technical issues across all levels of the stack while marshalling appropriate resources and providing timely updates to stakeholders • Deliver root cause analysis reports with actionable recommendations to prevent recurrence • Lead incident management, root cause analysis, and continuous improvement efforts • Drive automation-first practices using tools such as Python, Terraform, Ansible, and CI/CD Clouds. • Coach and mentor traditional systems administrators on cloud concepts, enabling them to maintain and optimize cloud services

• Design and implement secure AWS architectures leveraging EC2, S3, RDS, Lambda, IAM, VPC, CloudWatch, and CloudTrail. • Lead migration of legacy systems to AWS cloud environments. • Implement Infrastructure as Code using Terraform or CloudFormation. • Configure network security groups, encryption mechanisms, and logging frameworks. • Ensure FedRAMP Moderate/High compliance and support ATO documentation. • Optimize performance and cost management strategies. • Provide technical oversight for container deployments using Docker and Kubernetes/EKS.

• Design and implement services utilizing Go for cloud-based platforms • Collaborate with partners to develop APIs for medical data • Implement unit testable and maintainable code • Partner with InfoSec for secure solution design • Contribute to architectural and operational decisions • Build internal tooling and APIs for efficiency • Engage in technical planning and design

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team! - Develop, manage and collaborate with other engineering teams for authentication, authorization, audit logging and monitoring. - Ensure customers and internal users are provided a secure, user-friendly way to access systems, including support for SAML, SCIM, MFA and passwordless auth. - Ensure resources have the proper level of authorization that is secure, easy for users to understand and easy for engineers to develop against. - Ensure events are captured for analysis and surfaced for both internal teams and customers as appropriate. - Collaborate with other engineering teams to understand database access management patterns, provide guidance for security or usability improvements and contribute where possible. - Collaborate with other engineering teams to understand integration patterns for third party systems and work to develop common patterns and platforms to enable secure management of credentials for this application. - Ensure systems comply with relevant security and compliance frameworks, such as NIST. - Create and maintain internal documentation to enable other teams to on-board and integrate with identity & access management systems. - Respond to on-call escalations involving the identity and access management platform. Qualifications - 4+ years of experience as a software engineer, with focus on complex system design and development, working with diverse programming languages (i.e. C++, TypeScript). - Bachelor’s or Master’s degree in Computer Science or a related field; or equivalent experience. - Experience implementing authentication and authorization services to a standard such as SAML, SCIM, OAuth2, or OIDC. - Direct experience with Auth0, Okta, Cloud IAM (AWS, GCP, Azure) and AuthZ systems. - Experience implementing access control on web applications, APIs and databases. - Experience with distributed systems, cloud computing, and scalable architectures. - You are passionate about building secure systems that are easy to use and easy to develop against. - You have excellent communication skills and the ability to work well within a team and across engineering teams. - You are a strong problem solver and have solid production debugging skills. - You thrive in a fast paced environment, and see yourself as a partner with the business with the shared goal of moving the business forward. - You have a high level of responsibility, ownership and accountability. Benefits - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in 20 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A $500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. - Culture - We All Shape It - As part of our first 500 employees, you will be instrumental in shaping our culture.