Вакансии

Задачи: — Операционное управление SAP-авторизациями. — Проектирование и сопровождение SAP-ролей с использованием PFCG, включая single/composite roles, derived roles, organizational levels, authorization objects, field values, mass maintenance. — Диагностика проблем с авторизациями с помощью SU53 и STAUTHTRACE. — Работа с Central User Administration (CUA/ZBV), включая SU01, SU10, SCUL, назначение авторизаций и устранение проблем синхронизации. — Адаптация авторизаций в проектах миграции SAP S/4HANA Brownfield. — Обработка операционных тикетов и поддержка пользователей и IT-команд по вопросам авторизаций. Требования: — Практический опыт операционного управления SAP-авторизациями. — Экспертные знания проектирования и сопровождения SAP-ролей. — Опыт диагностики проблем с авторизациями. — Опыт работы с Central User Administration. — Опыт адаптации авторизаций в SAP S/4HANA Brownfield. — Будет преимуществом опыт работы с SAP Fiori Authorizations и знание Risk Management / Segregation of Duties (SoD). — Необходимы два консультанта с взаимодополняющим уровнем экспертизы: один с фокусом на операционном администрировании и обработке тикетов, второй — senior-уровня для решения сложных проблем и управления рисками. Условия: — Контракт: ИП/ООО/ГПХ/Самозанятый. — Формат работы: 100% удалённо. — Язык работы: английский (обязательно), немецкий (преимущество). — Продолжительность: до середины 2027 года. Готовы рассмотреть одного подходящего кандидата.

Location: Dubai, United Arab Emirates; Riyadh, Saudi Arabia; Beirut, Lebanon; Amman, Jordan; Cairo, Egypt Summary: Müller’s Solutions is looking for a certified SAP Authorization Consultant to join an SAP S/4HANA Public Cloud implementation. You will design and manage user access and security, making sure business roles, restrictions and identity setup are secure, compliant and in line with client job functions. You will work closely with functional consultants and client stakeholders from design through go-live. This is a remote role. Description: Design business roles from SAP templates, based on client job functions and processes Configure business catalogs, business role templates and read/write/value help restrictions Set up SAP Cloud Identity Services (IAS/IPS) for SSO, user provisioning and integration with the client’s identity provider Run segregation of duties (SoD) checks and fix access conflicts Manage user creation, role assignment and access changes through go-live and hypercare Support internal and external audits with access reviews and documentation Document role designs and the security setup, and handle authorization issues and support requests Requirements Requirements: 4+ years of SAP security/authorization experience, with hands-on S/4HANA Public Cloud IAM exposure Valid SAP S/4HANA Cloud Public Edition certification (security certification preferred) Solid knowledge of SAP Cloud Identity Services (IAS/IPS) and SSO setup (SAML, Azure AD / Entra ID) Good understanding of SoD, compliance and audit requirements Experience on at least one S/4HANA Cloud Public Edition implementation Strong communication skills in English and able to work directly with clients remotely Experience with SAP GRC or SAP Cloud IAG is a plus

Location: Montevideo, Uruguay New opportunities in Uruguay, Montevideo! 🟢 Dev.Pro is a US-based software development company helping tech companies build their products and grow their business. We’re remote-first, and we work with independent contractors in over 55 countries, so you’d be collaborating in a multicultural environment on some really interesting projects. We are seeking a Digital Content Author to build, update, and maintain customer-facing digital experiences (App and Web) for a major global brand. This role is focused on tactical content execution, quality assurance, and daily platform maintenance. In close coordination with the Digital Content Operations Lead and US-based teams, you will transform design assets into functional digital content, troubleshoot routine authoring issues, and ensure all releases meet strict quality and governance standards. 🧩 Key responsibilities: Hands-On Execution: Build, update, and maintain customer-facing App/Web content in Contentful (or similar enterprise CMS) using approved Figma designs, assets, copy, and requirements. Campaign Delivery: Execute scheduled Experience Launches, daily content updates, planned marketing campaigns, and other assigned content requests accurately and on time. Validation & Troubleshooting: Validate authoring inputs, identify missing or inconsistent requirements, and flag blockers before execution. Troubleshoot routine authoring issues and escalate complex technical problems to the appropriate lead. Quality Assurance: Perform thorough content QA and peer reviews to ensure absolute accuracy, functionality, and consistency across all digital experiences. Release Management: Prepare content for release and support the publishing process, production validation, and live issue resolution. Governance & Documentation: Follow established content governance, source-of-truth guidelines, QA, and publishing standards. Maintain highly accurate Jira ticket updates, authoring status, and execution documentation. Cross-Functional Collaboration: Collaborate daily with the nearshore Content Lead, offshore teams, and the US-based Content Operations team to meet strict deadlines and quality expectations. 🟩 Ideal Experience & Qualifications: 1-3 years of hands-on experience authoring in Contentful or a comparable enterprise headless CMS. Strong working knowledge of digital content QA processes and peer review standards. Proficiency using design extraction tools (Figma) and project management/ticketing systems (Jira). Exceptional attention to detail and a strong commitment to accuracy in a high-volume environment. Ability to manage multiple concurrent deadlines and execute effectively under pressure. Strong communication skills with the ability to clearly flag issues and escalate blockers. Must be able to work on-site in Santiago City in Chile Interested? Find out more: 📋 How to Join Us 💻 LinkedIn Page 📈 Our website 💻 IG Page By submitting application, I've read and agree to the Dev.Pro Private Policy and Consent on Processing of Personal Data . I agree to have my Personal Data being stored and processed by Dev.Pro.

Location: Santiago, Chile New opportunities in Chile, Santiago! 🟢 Dev.Pro is a US-based software development company helping tech companies build their products and grow their business. We’re remote-first, and we work with independent contractors in over 55 countries, so you’d be collaborating in a multicultural environment on some really interesting projects. We are seeking a Digital Content Author to build, update, and maintain customer-facing digital experiences (App and Web) for a major global brand. This role is focused on tactical content execution, quality assurance, and daily platform maintenance. In close coordination with the Digital Content Operations Lead and US-based teams, you will transform design assets into functional digital content, troubleshoot routine authoring issues, and ensure all releases meet strict quality and governance standards. 🧩 Key responsibilities: Hands-On Execution: Build, update, and maintain customer-facing App/Web content in Contentful (or similar enterprise CMS) using approved Figma designs, assets, copy, and requirements. Campaign Delivery: Execute scheduled Experience Launches, daily content updates, planned marketing campaigns, and other assigned content requests accurately and on time. Validation & Troubleshooting: Validate authoring inputs, identify missing or inconsistent requirements, and flag blockers before execution. Troubleshoot routine authoring issues and escalate complex technical problems to the appropriate lead. Quality Assurance: Perform thorough content QA and peer reviews to ensure absolute accuracy, functionality, and consistency across all digital experiences. Release Management: Prepare content for release and support the publishing process, production validation, and live issue resolution. Governance & Documentation: Follow established content governance, source-of-truth guidelines, QA, and publishing standards. Maintain highly accurate Jira ticket updates, authoring status, and execution documentation. Cross-Functional Collaboration: Collaborate daily with the nearshore Content Lead, offshore teams, and the US-based Content Operations team to meet strict deadlines and quality expectations. 🟩 Ideal Experience & Qualifications: 1-3 years of hands-on experience authoring in Contentful or a comparable enterprise headless CMS. Strong working knowledge of digital content QA processes and peer review standards. Proficiency using design extraction tools (Figma) and project management/ticketing systems (Jira). Exceptional attention to detail and a strong commitment to accuracy in a high-volume environment. Ability to manage multiple concurrent deadlines and execute effectively under pressure. Strong communication skills with the ability to clearly flag issues and escalate blockers. Must be able to work on-site in Santiago City in Chile Interested? Find out more: 📋 How to Join Us 💻 LinkedIn Page 📈 Our website 💻 IG Page By submitting application, I've read and agree to the Dev.Pro Private Policy and Consent on Processing of Personal Data . I agree to have my Personal Data being stored and processed by Dev.Pro.

Location: Bangalore, India GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Software Engineer on GitLab's Authorization team, you'll help build and maintain the system that decides what every user, token, and automated agent can access on GitLab.com, Self-Managed, and Dedicated. You'll work alongside experienced engineers who guide the larger design decisions, delivering well-scoped changes and growing into ownership of larger parts of the system. Today, that work is Ruby on Rails. Roughly 400 policy classes and a catalog of about 1,900 permissions sit behind every application programming interface (API) request. You'll work on fine-grained token permissions, custom roles, and the GraphQL and representational state transfer (REST) APIs that enforce them. A single request can trigger hundreds of permission checks, so correctness and performance both matter. You'll also contribute to moving the permission model to a new authorization stack that pairs the Rails monolith with a Rust policy engine. The engine represents access relationships and evaluates permission rules, and can run within the monolith's process or be reached through remote procedure calls using gRPC. You don't need prior Rust experience: several engineers on the team learned it for this work, and we'll support you doing the same. Some examples of our projects: Refactoring GitLab's policy layer so the same permission definitions can be evaluated by the monolith and the new authorization service Extending fine-grained token permissions to more resources, with guidance from senior engineers on the design What you'll do Implement authorization changes in GitLab's Ruby on Rails monolith so permission checks allow intended access and deny unauthorized access. Deliver well-scoped workstreams from feature-flagged rollout through verifying that the old and new systems produce the same results, with review and guidance from senior engineers. Build and extend fine-grained permissions for tokens and roles so additional resources have permission coverage consistent with the established catalog. Extend and fix authorization enforcement so GraphQL and the REST API enforce the intended permissions consistently. Make incremental refactors to long-lived policy code without changing behavior for existing customers. Investigate and fix reliability, performance, and security issues so affected permission checks return the expected results without regressions. Work with the authentication, platform, and artificial intelligence (AI) teams to document interface contracts that keep permission checks consistent as authorization moves toward a shared service. Contribute to design documents, merge requests, and code reviews so proposed changes have a documented rationale and review feedback is addressed asynchronously. Take part in on-call or operational support where your team’s ownership model requires it. What you'll bring Solid experience building and maintaining production Ruby on Rails applications, typically gained over 2 to 4 years or more. Hands-on experience with authorization concepts, such as role-based access control or fine-grained permissions, from work or projects. A security mindset: you treat a permission bug as a security bug and consider who a change could affect before choosing an implementation. Experience making careful changes to existing codebases, including incremental refactors and feature-flagged rollouts that preserve existing behavior. Familiarity with GraphQL or API authorization patterns. Awareness of performance, including how repeated permission checks can add up on every request. Strong written communication and the ability to work effectively when most decisions happen in a document or merge request rather than a meeting. Helpful, but not required: hands-on PostgreSQL experience, or experience with Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture. We welcome transferable experience from adjacent domains such as identity, policy engines, and platform security. About the team We work in a fully asynchronous organization, with most decisions made in documents or merge requests rather than meetings. GitLab's mission is to enable everyone to contribute to and co-create the software that powers our world. Our values include collaboration, results, efficiency, diversity, inclusion and belonging, iteration, and transparency. We expect all GitLab team members to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: United States (Remote); At Signifyd, we help merchants confidently grow their businesses by building trusted relationships with their customers. Our advanced technology, combined with a team genuinely invested in our clients’ success, creates frictionless shopping experiences, approving more good orders, protecting revenue, and keeping customers happy. Trusted by thousands of leading merchants across more than 100 countries, we securely process billions of transactions each year. Our people are the heart of everything we do, driving our mission forward with commitment, empathy, and creativity. Join us on our mission to empower confident, fraud-free commerce by helping online retailers provide superior customer experiences and eliminate fraud. Learn about our company values here ! About the role We are looking for a Senior Product Manager to own our authorization optimization product area, where payments and fraud decisioning meet. You will own authorization rate improvement for legitimate transactions. Set the strategy, prioritize the highest-value opportunities, and drive delivery across existing capability teams. This is a hands-on, technical product role. You will translate strategy into precise requirements, define the data and API interfaces that connect us with merchants, payment service providers and issuers, and be the product voice in architecture discussions. You will work daily with engineering and data science, and alongside go-to-market teams who bring the product to merchants. What you'll do Own the authorization optimization roadmap end to end: set priorities, sequence delivery, make tradeoffs, and communicate the plan and its rationale to leadership, engineering and go-to-market teams. Determine where Signifyd should build, orchestrate, partner or influence issuers directly, informed by issuer behavior, merchant needs and regional payment dynamics. Write detailed technical specifications, user stories and acceptance criteria, and manage the backlog with engineering. Define and evolve the APIs, data models and integration points through which authorization and decline data flows between merchants, PSPs, issuers and our platform. Identify, evaluate and develop new partnerships (such as PSPs, gateways, acquirers, issuers and data or technology providers) that expand our coverage and deliver measurable value to merchants. Build issuer/BIN intelligence covering authorization performance, decline patterns and treatment effectiveness. Maintain a quantified opportunity map to prioritize recoverable revenue. Drive issuer-specific decisioning across step-ups, 3DS, decline recovery and intelligent retries; inform routing where merchants have multiple PSP or acquirer options. Work with data science to define requirements for risk-aware decisioning, balancing approval gains against fraud and chargeback exposure. Own measurable authorization uplift and recovered merchant revenue. Demonstrate treatment impact through merchant proofs of value and issuer/BIN-level reporting. Partner with sales, solutions and customer success to bring merchant feedback into the roadmap and support adoption. Stay current on card network rules, regulation and industry practice, and use that knowledge to sharpen requirements. What you'll bring (required) 5+ years in a product management role, including ownership of a roadmap and end-to-end delivery. Hands-on payments product experience spanning issuer authorization behavior, with a deep understanding of decline recovery and retries, 3DS, PSD2/SCA frameworks (including the upcoming transition to PSD3/PSR), and demonstrated improvements in authorization performance. Experience writing detailed technical specs and defining APIs or data interfaces in partnership with engineering (backend or high-volume transaction systems a plus). Strong analytical skills, with comfort working from transaction-level data and defining success metrics. Experience working closely with data science or analytics teams and translating insights into product requirements. Proven ability to influence cross-functional stakeholders without direct authority. Clear written and verbal communication with technical and non-technical audiences. Preferred Experience at a payment processor, PSP, acquirer, card network, issuer or fraud/risk vendor. Exposure to fraud, risk or digital identity products, including the false-decline versus fraud-loss tradeoff. Experience defining requirements for ML-driven decisioning. Familiarity with 3DS/EMVCo, tokenization, ISO 8583 and PSD2/SCA. B2B SaaS or enterprise e-commerce merchant experience. #LI-Remote Benefits in our US offices: Discretionary Time Off Policy (Unlimited!) 401K Match Stock Options Annual Performance Bonus or Commissions Paid Parental Leave (12 weeks) On-Demand Therapy for all employees & their dependents Dedicated learning budget through Learnerbly Health Insurance Dental Insurance Vision Insurance Flexible Spending Account (FSA) Short Term and Long Term Disability Insurance Life Insurance Company Social Events Signifyd Swag Compensation: In the United States, each work location is assigned a specific pay zone, which determines the salary range for a given position. The starting base salary for the selected candidate will be based on a variety of factors, including job-related skills, experience, qualifications, geographic location, and current market conditions. Base Salary Ranges by Pay Zone: Tier 1 (NYC/SF Bay Area/Seattle): $165,000 – $205,000 annually Tier 2 (DC Metro/Austin/Chicago/Denver/Boston/Los Angeles/San Diego): $155,000 – $195,000 annually Tier 3 (US - All Other): $145,000 – $185,000 annually Equity: This role is eligible for a stock option grant of 7,000 stock options, based on the position level and internal compensation guidelines. Bonus: This role is eligible for an annual performance bonus of up to 10% of base salary. We want to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process. Signifyd's Applicant Privacy Notice

Location: United States Workplace: Remote About the Team The Access Control team owns authorization across ClickHouse Cloud. We design and enforce the roles and permissions model, organization hierarchies, API key management, and security boundaries that every product surface and tenant depends on. Having recently shipped custom roles and fine-grained access, we are now evolving our architecture to support our largest enterprise customer structures. What You Will Do - Architect and build the next generation of our authorization model: multi-level organization hierarchies, workspace isolation, and resource-scoped roles. - Implement and enforce consistent authorization checks across all public and internal APIs. - Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption. - Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs. What We Are Looking For - Experience: 6+ years building security platforms, access control engines, or core backend services at scale. - Domain Expertise: Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO. - Core Stack: Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores. - Migration Discipline: Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option. Ideal Backgrounds: Enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies. PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new eligible team member who joins our company receives equity. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: Philippines REMOTE (WFH) | FULL-TIME | 9PM-6AM PHT (FIXED SCHEDULE) Neolytix is looking for a Healthcare Associate who already knows the prior authorization world inside and out  — in a healthcare BPO, a hospital, a clinic, a payer-services team, or a revenue cycle department — and can step in already knowing how the work goes. WHAT YOU WILL DO: Own the authorization lifecycle Submit authorization requests through payer portals and other approved channels, and track them through to resolution. Collect and validate clinical documentation and patient information needed to support each request. Manage payer follow-up, status tracking, escalations, and deadlines so nothing slips through the cracks. Support peer-to-peer reviews, denials, reconsiderations, and appeals when a request needs a second look. Navigate the systems that keep care moving Work confidently across EHR/EMR systems, payer portals, communication tools, and multi-queue work environments. Enter data accurately, spot errors before they become problems, complete forms correctly the first time, and keep documentation audit-ready. Take inbound calls from healthcare professionals — nurses, physicians, and office staff — with authorization-related questions, and professionally assist insurance members who need help or clarification. Explain billing, benefits, and account details to callers clearly and professionally, verifying caller and account information against records before processing any request. Keep the queue under control Manage a high-volume, multi-queue workload with strong organization, time prioritization, and SLA awareness. Document every interaction completely and accurately, and resolve issues patiently — including with callers who need extra time or a simpler explanation. Maintain confidentiality and professionalism at all times, and complete required HIPAA and security training. WHY APPLY? Gain a meaningful work, as you're the person standing between a patient and the care they need. This is a role built around the skills you already have. If prior authorization is a language you already speak fluently, we'd love to hear from you!

Location: Albania; Azerbaijan; Georgia; Serbia; Slovenia; Poland Intetics Inc. , a global technology company providing custom software application development, distributed professional teams, software product quality assessment, and “all-things-digital” solutions, is seeking a highly skilled and experienced Go Developer to join our dynamic team on a full-time basis. We are looking for a Senior/Lead Go Backend Engineer with strong Identity and Access Management (IAM) expertise to design, build, and operate secure, high-performance authentication services. The candidate should have 7+ years of backend engineering experience, including 5+ years with Go and 3–4+ years working with authentication, authorization, SSO, MFA, OAuth 2.0, OpenID Connect, JWT, and session management in production environments. Project Responsibilities: - Design, develop, and operate high-throughput, low-latency identity services: Single Sign-On (SSO), Multi-Factor Authentication (MFA), session management, and federation. - Own features end-to-end from design through production and support. -Implement and scale modern authentication and authorization protocols and token formats (OAuth 2.0, OpenID Connect, JWTs), including secure token issuance, rotation, and revocation strategies. -Write clean, concurrent, and highly performant backend services primarily in Go; design idiomatic, testable code and clear API contracts (gRPC/HTTP). - Use your DevOps experience to deploy, manage, and automate identity infrastructure (CI/CD, monitoring, and incident response). - Serve as the subject matter expert on authentication and identity: own internal security reviews, threat modeling for identity flows, and guide other teams on secure integrations with our platform. Integrate and maintain solutions with custom and standard identity providers (e.g. Keycloak and AWS Cognito), and federation patterns. - Mentor engineers, conduct design reviews, and contribute to the team's technical roadmap and security posture. Requirements 7+ years of backend engineering experience, including 5+ years with Go and 3–4+ years working with authentication, authorization, SSO, MFA, OAuth 2.0, OpenID Connect, JWT, and session management in production environments Strong production experience with Go and gRPC; building complex distributed backend systems Deep knowledge of authentication and authorization: OAuth2, OIDC, RBAC, JWT, token security, session management, cryptography Strong understanding of web security, federated identity, secure coding, and OWASP Top 10 Hands-on experience with AWS, Kubernetes, and Terraform Experience designing high-throughput, low-latency systems with a focus on security and correctness Strong communication skills; able to explain security and architecture trade-offs to technical and non-technical stakeholders Nice to have: Experience with SAML, SCIM, PKI, JWKs/JWKS endpoints, key management (KMS/HSM) and token introspection. Working knowledge of identity platforms (commercial or open source), rate limiting, abuse mitigation, and adaptive authentication. Experience with IntelicsML

Location: San Francisco; Toronto; New York; Montreal; Seattle Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE The largest, most demanding enterprises run on Baseten, and they bring exacting requirements for how people, services, and agents access the platform. This is the founding role for our identity and authorization team within enterprise engineering. You'll own the identity and access layer of the Baseten platform: the authorization model, credential systems, and admin experiences that enterprise IT teams use to govern access for organizations like Harvey, HubSpot, and Notion. You'll design and build Baseten's fine-grained authorization system from the ground up to support the workflows customers depend on today while giving them cleaner, more precise ways to manage access as the platform grows. Authorization at Baseten requires low-latency permission checks at high request volume, consistent contracts and behaviors across the product suite, and strong security guarantees for mission-critical, highly regulated workloads.   EXAMPLE INITIATIVES Recent and upcoming work in this area: - Fine-grained authorization for users, service accounts, and agentic workloads: per-resource permissions at the organization, team, and workload scope to support both common workflows and complex enterprise access policies - Programmatic authentication allowing high-compliance customers to connect service principles securely via short-lived, workload-based credentials - Agent credentials that grant an agent exactly the access it needs for the given task and nothing more - Enterprise identity lifecycle including single sign-on, SCIM provisioning, and per-organization session expiry policies - Admin controls for centralized visibility, auditability, and governance over credentials, roles, and access   RESPONSIBILITIES - Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration. - Design authorization and credential models that support critical user workflows today and can be safely extended as the platform evolves. - Partner with product, design, and customer-facing teams to turn enterprise security requirements into durable technical solutions. - Establish engineering practices for quality, security, observability, and operational ownership. - Provide technical leadership and mentorship as the team grows.   REQUIREMENTS - 4-5+ years of experience building production backend systems, including hands-on design and implementation of a product authorization system: per-resource or per-object permissions, relationship-based access control, a policy engine, or a fine-grained authorization system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar. - Demonstrated end-to-end ownership: you've taken a system from first design through implementation, production rollout, and iteration with users. - Experience developing and operating multi-tenant systems at scale, where authorization checks sit in the request path and latency and consistency matter. - Comfort working across the full stack, from product and application code to cloud and Kubernetes infrastructure.   NICE TO HAVE - Experience with Python and Go. - Experience running an OpenFGA, SpiceDB, or similar deployment in production, beyond a proof of concept. - Working knowledge of OAuth, OIDC, and SCIM at the protocol level. BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Location: El Salvador; Colombia; Nicaragua; Honduras; Guatemala; Dominican Republic We are seeking an experienced Virtual Referral & Prior Authorization Coordinator to join a growing Primary Care and Family Medicine practice in the US. This role requires recent, hands-on experience using eClinicalWorks (eCW) to seamlessly integrate into established workflows. You will take full ownership of processing patient referrals and insurance prior authorizations from start to finish. As you become proficient in these core responsibilities, the role will expand to include patient scheduling, phone management, and general administrative front-desk support. Work Schedule: Monday through Friday, 8:00 AM – 5:00 PM CST. RESPONSIBILITIES Referral Coordination (Primary): Prepare and submit referrals in eClinicalWorks (eCW), verify patient and insurance details, attach necessary clinical documentation, follow up with specialist offices, and track each referral to completion. Prior Authorizations (Primary): Verify authorization requirements, submit requests through insurance payor portals, gather supporting clinical records, track deadlines, escalate claim denials, and keep providers and patients informed. Administrative & Reception Support (Secondary): Handle inbound and outbound calls via Weave, schedule patient appointments, process intake and registration, update demographics, verify insurance coverage, and manage follow-up messages. Requirements eClinicalWorks (eCW): Recent, hands-on experience using eCW in a US-based medical practice (mandatory). Referrals & Prior Auths: Proven experience managing full-cycle referrals and insurance prior authorizations independently. Bilingual Skills: Fully bilingual in English and Spanish with clear, professional spoken English. US Healthcare Experience: Direct experience working with US medical practices, ideally in Primary Care or Family Medicine. Adaptability: Willingness to expand responsibilities into phone management, patient scheduling, and front-desk reception duties. Compliance: Solid understanding of medical terminology, insurance communication, and strict HIPAA guidelines. NICE TO HAVES Experience using Weave VoIP phone systems. High-volume referral and prior authorization handling. Background in insurance benefits verification and front-desk patient reception.

Location: Hybrid About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Austin or London About the Role TLS is the connective tissue of the Internet, and Cloudflare terminates a large fraction of it. Cloudflare sits in front of more than 20 percent of global Internet request traffic and terminates TLS for millions of domains. Every day, our network handles certificate operations across products like Universal SSL, SSL for SaaS, Origin CA, Cloudflare Access, and Cloudflare Tunnel. That scale has taught us how the WebPKI ecosystem works from the consuming side.  As certificate lifetimes shorten, agentic activity increases, and post-quantum certificates move toward production, the number of certificates the Internet depends on will grow dramatically. Cloudflare is building a certificate authority for the whole Internet: a public, redundant, transparent CA that provides another trusted source of automated certificates and helps make the encrypted web more resilient. We intend to be ACME-first, automation-first, and transparent by design. We also intend to lead where the ecosystem is going, including post-quantum certificates and Merkle Tree Certificates, while continuing to support the classic WebPKI customers rely on today. As Principal Product Manager for Cloudflare's Certificate Authority business, you will define the product strategy, roadmap, customer experience, and commercial model for this new venture. You will work across product, engineering, security, compliance, legal, operations, sales, marketing, and the WebPKI ecosystem to turn Cloudflare's CA from a major technical commitment into a product customers trust and adopt. This is an early-days role on a growing team. It is not a role for someone who only manages backlog. The right person will be comfortable with high-consequence infrastructure, deep customer discovery, ecosystem trust, compliance scrutiny, and zero-to-one product building. The decisions you make in the first year will shape how Cloudflare participates in the certificate authority market for years to come. Responsibilities Define the product strategy for Cloudflare's CA business across publicly trusted certificates, certificate lifecycle automation, ACME issuance, renewal workflows, revocation, Certificate Transparency, customer controls, developer experience, and integrations with Cloudflare's broader platform. Build for the whole Internet by understanding the needs of developers, site owners, platform teams, SaaS providers, enterprise security teams, infrastructure operators, and partners who depend on certificates for availability, security, and compliance. Make resilience a product principle. Help design product requirements that fail small, reduce customer blast radius, support automated recovery, and make certificate replacement fast enough to handle compliance issues, revocation events, or ecosystem incidents. Drive an ACME-first customer experience that makes it easy for users of existing free or automated CAs to adopt Cloudflare with minimal tooling changes. Partner closely with engineering on systems that manage certificate lifecycles, automate issuance and renewal, integrate with HSMs, protect keys, support auditability, and operate within strict reliability and correctness requirements. Partner with compliance, legal, security, and operations to ensure product decisions align with CA/Browser Forum Baseline Requirements, WebTrust audits, root store program policies, Certificate Policy and Certification Practice Statement commitments, and public incident response expectations. Own go-to-market strategy including packaging, pricing, launch sequencing, competitive positioning, customer segmentation, sales enablement, developer messaging, and adoption metrics. Represent the customer and the ecosystem in product decisions where trust, transparency, uptime, security, and commercial adoption must all be balanced. Work across Cloudflare product teams including SSL/TLS, Application Security, Zero Trust, Workers, Registrar, DNS, Load Balancing, SaaS products, and infrastructure teams that consume or expose certificate services. Help make Cloudflare Customer Zero by ensuring our own usage of the CA exercises the product at Cloudflare scale and informs the roadmap before customers depend on it. Desirable Skills, Knowledge and Experience 10+ years of product management experience building technical products for developers, security teams, infrastructure teams, enterprises, or cloud platforms. Experience with security, identity, infrastructure, or developer platform products where correctness, reliability, compliance, and trust are core product requirements. Working knowledge of PKI and certificate lifecycle management including TLS certificates, X.509, ACME, public and private CAs, revocation, Certificate Transparency, mTLS, HSMs, and enterprise certificate automation. Strong business judgment with experience defining product strategy, pricing and packaging, customer segmentation, and go-to-market plans for technical B2B products. Ability to operate in ambiguity and create structure around a new business, including market definition, customer discovery, roadmap tradeoffs, launch planning, and executive alignment. Technical fluency with engineering teams and comfort discussing APIs, distributed systems, key management, audit trails, reliability, operational failure modes, and security tradeoffs. Strong written communication for strategy documents, product requirements, launch narratives, customer-facing messaging, and high-stakes internal decisions. Comfort with high-consequence work. A mis-issued, mis-revoked, or unavailable certificate can become a public, ecosystem-visible event. You need the judgment to move quickly and the discipline to be careful. Bonus Points Direct experience working on certificate authority, PKI, certificate lifecycle management, cloud security, identity, or trust services products. Experience with publicly trusted CAs, private PKI, managed certificate services, or platforms such as AWS Certificate Manager, AWS Private CA, Google Trust Services, DigiCert, Sectigo, Let's Encrypt / ISRG, Entrust, Microsoft PKI, HashiCorp Vault PKI, step-ca, or CFSSL. Familiarity with CA/Browser Forum requirements, browser root programs, WebTrust for CAs, WebTrust Baseline Requirements, or public CA incident reporting. Experience building API-first developer products, especially products involving ACME, SDKs, CLI workflows, Kubernetes, service mesh, mTLS, or infrastructure-as-code integrations. Experience launching new businesses or zero-to-one products inside a larger platform company. Familiarity with certificate automation challenges created by 90-day and shorter certificate lifetimes. Familiarity with post-quantum cryptography, crypto-agility, Merkle Tree Certificates, or customer migration planning for cryptographic transitions. Prior participation in WebPKI, IETF, browser trust, transparency, or security standards communities. Compensation Compensation may be adjusted depending on work location. Equity This role is eligible to participate in Cloudflare’s equity plan. Benefits Cloudflare offers a complete package of benefits and programs to support you and your family.  Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun!  The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S. Health & Welfare Benefits Medical/Rx Insurance Dental Insurance Vision Insurance Flexible Spending Accounts Commuter Spending Accounts Fertility & Family Forming Benefits On-demand mental health support and Employee Assistance Program Global Travel Medical Insurance Financial Benefits Short and Long Term Disability Insurance Life & Accident Insurance 401(k) Retirement Savings Plan Employee Stock Participation Plan Time Off Flexible paid time off covering vacation and sick leave Leave programs, including parental, pregnancy health, medical, and bereavement leave What Makes Cloudflare Special? We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost. Athenian Project : In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states. 1.1.1.1 : We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers. Sound like something you’d like to be a part of? We’d love to hear from you! Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process. This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license. Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Location: Hybrid About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Cloudflare is building a new public Certificate Authority for the Internet. We are looking for a senior technical architect to help define the systems, protocols, and security architecture behind it. This role spans applied cryptography, Web PKI, distributed systems, security engineering, compliance, and Internet standards. It will help Cloudflare build a CA that operates safely at Internet scale while establishing a credible path from today's X.509 ecosystem toward post-quantum authentication using Merkle Tree Certificates (MTCs). Mission Define and guide the end-to-end architecture of Cloudflare's public Certificate Authority: a high-assurance, highly available system capable of issuing conventional publicly trusted certificates at Cloudflare scale while supporting Merkle Tree Certificates (MTCs) and the evolution toward a post-quantum Web PKI. You will help determine not only how the CA is implemented, but also its trust boundaries, key hierarchy, issuance architecture, auditability, failure modes, incident response mechanisms, and long-term cryptographic evolution. Key Responsibilities Define and maintain the end-to-end technical architecture of Cloudflare's public CA across certificate issuance, key management, transparency, revocation, renewal, and relying-party integration. Design root and intermediate CA trust hierarchies, signing systems, HSM integration, key ceremonies, key rotation, backup, recovery, migration, and key-compromise response. Architect secure, resilient, and highly available issuance services capable of operating at Internet scale and across multiple geographic and failure domains. Design certificate lifecycle systems around ACME, domain and IP validation, CAA, Certificate Transparency, pre-issuance linting, revocation, renewal, and large-scale certificate replacement. Integrate Cloudflare’s MTC infrastructure, including CA logs, landmarks,, cosigning or mirroring, and interactions with relying parties. Develop practical architectures for coexistence and migration between classical X.509 certificates and post-quantum authentication mechanisms. Define trust boundaries, security properties, and threat models covering key compromise, unauthorized issuance, software supply-chain compromise, operator error, malicious insiders, infrastructure failure, split views, and cryptographic migration. Design systems that make CA behavior observable and independently verifiable through transparency mechanisms, reproducible builds, cryptographic attestations, public operational telemetry, tamper-evident evidence, and audit controls. Design failure containment and recovery mechanisms that support safe certificate replacement, revocation, key rotation, and incident response without creating avoidable Internet availability failures. Translate CA/Browser Forum requirements, browser and operating-system root-program policies, audit criteria, and certification requirements into concrete technical and operational controls. Review protocols, architecture, and implementations with an adversarial mindset, identifying assumptions and failure modes that do not hold at Internet scale. Work closely with Cloudflare's cryptography, TLS, security, networking, infrastructure, compliance, product, and operations teams. Provide architectural direction, design review, and technical mentorship to engineers implementing and operating the CA platform. Represent Cloudflare in relevant standards and industry work, collaborating with browser vendors, root programs, researchers, auditors, CA operators, and the wider Web PKI community. What You'll Bring Substantial experience designing or operating security-critical systems, with deep expertise in at least one of: public Certificate Authorities, Web PKI, applied cryptography, TLS and Internet security protocols, Certificate Transparency, hardware-backed key management, or large-scale distributed security systems. Strong knowledge of certificate trust chains, issuance and validation, revocation, key lifecycle management, and the security and availability implications of CA design decisions. Experience defining system trust boundaries, threat models, security invariants, and failure-handling strategies. Ability to reason about systems in which a subtle architectural or operational mistake can affect a significant fraction of the Internet. Experience leading architecture across multiple engineering teams without relying solely on organizational authority. Strong written and verbal communication, including the ability to explain cryptographic and architectural tradeoffs to engineers, auditors, standards participants, and senior stakeholders. Comfort operating with substantial autonomy in an evolving technical and policy environment. What Makes Cloudflare Special? We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost. Athenian Project : In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states. 1.1.1.1 : We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers. Sound like something you’d like to be a part of? We’d love to hear from you! Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process. This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license. Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Location: Montreal, Canada 📍 Location: Montreal, Canada 📄 Employment Type: Full-Time 🏢 Work Arrangement: Remote opportunity for US and Canadian citizens. Relocation assistance + bonus for European candidates. 🚀 Start Date: Immediate 💰 Compensation: TBD -- based on skills and experience Important Screening Requirements Must be eligible to obtain or hold Controlled Goods Program (CGP) clearance . H-1B visa holders are welcome to apply. Remote opportunity for US and Canadian citizens. Relocation assistance + bonus for European candidates. About the Role We are seeking an experienced Satellite and Payload System Test Authority to lead the planning, coordination, and execution of system-level testing for advanced satellite and payload communication systems. In this role, you will oversee the validation and integration of satellite platforms, payloads, and ground systems to ensure mission readiness and performance. The ideal candidate has extensive experience in satellite communications, systems engineering, and integration testing across LEO, MEO, or GEO satellite programs. Key Responsibilities Lead system-level testing, validation, and verification activities for satellite and payload communication systems. Develop and execute test strategies, procedures, and plans for satellite and payload integration. Support the integration of space and ground segment systems throughout the project lifecycle. Analyze system performance and troubleshoot hardware, software, and communication issues during testing. Collaborate with multidisciplinary engineering teams to ensure successful system integration and mission readiness. Support flight software integration, satellite database validation, and operational testing. Develop automation tools and scripts using Python or other scripting languages to improve testing efficiency. Prepare technical documentation, test reports, and engineering recommendations. Required Qualifications Bachelor's degree in Electrical Engineering or a related engineering discipline. 10+ years of relevant experience in digital communications within the space industry. Experience with LEO, MEO, and/or GEO satellite communication systems . Strong understanding of: Phased Array Antenna systems with multiple active elements Digital modulation techniques, signal processing, and networking Space and ground segment architecture, specification, and integration Flight Software and Satellite Database concepts Proficiency with Python or other scripting languages. Preferred Qualifications Experience leading system integration, verification, and validation activities for satellite or payload systems. Experience supporting satellite communications, payload development, or mission operations. Knowledge of automated test frameworks and systems engineering best practices. Strong leadership, analytical, and cross-functional collaboration skills.

Location: Remote, Poland GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role The Pipeline Authoring group develops tools for creating and managing your pipelines. We balance maintaining core functionality of the product with developing newer areas. Our key areas of focus are CI/CD components and the CI/CD Catalog , which allows users to discover, reuse, and contribute CI/CD components to make software development more efficient and productive. As a Backend Engineer, you will work on maturing our Catalog and Component functionality and reliability, improve and maintain performance, scalability and security of Pipeline Creation, and always consider usability and user experience in these key areas of the product. Your contributions and collaboration with your fellow team members will ensure that GitLab CI/CD remains a best in class solution. Some of the things we have recently been working on include: Inputs for Pipelines Inputs for Jobs Inputs Enhancements CI/CD Catalog - UX improvements Learn more on the Pipeline Authoring direction pages: Pipeline Composition Component Catalog About the team The Pipeline Authoring team is made up of experienced Engineers, some having worked in this area for many years and some having joined more recently. The team shares a passion for finding solutions to complex challenges that scale and are maintainable. Located across five countries and several time zones, async communication is key to our success. The team lives by GitLab’s core values and is always eager to improve. Many things in GitLab begin with a pipeline, so our team regularly interacts with other GitLab teams, community contributors and customers as we strive to create the best possible Pipeline Authoring experience. Learn more on the Pipeline Authoring group handbook page and Pipeline Authoring Unfiltered playlist . What you’ll do Write high-quality, efficient, and maintainable code while adhering to best practices and contributing to code reviews. Ship small features and improvements with minimal guidance and support from other team members. Collaborate with the team on larger projects. Advocate for improvements to reliability, security, and performance. Recognize impediments to our efficiency as a team (“technical debt”), propose and implement solutions. Participate in agile development practices, including async planning sessions, stand-ups, and retrospectives, to drive iterative software development and continuous improvement for the team. Contribute to our development process by asking questions and providing feedback to make us better as a team. Embrace continuous learning and stay connected with industry best practices, tools, and technologies to drive improvements in our software. Participate in Tier 2 on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues. What you’ll bring Proficiency with Ruby and Ruby on Rails Proven experience writing testable code in Ruby on Rails Experience with Relational Database Management Systems (PostgreSQL is a plus) Experience with GraphQL is a plus An ability to self manage and organize in an asynchronous and collaborative work environment Demonstrated capacity to clearly and concisely communicate about complex technical, architectural, and/or organizational problems and propose thorough iterative solutions Familiarity with various stages of software development end-to-end (Agile methodologies is a plus) Proven ability to work effectively in a team including product managers, designers, and other engineers A commitment to continuous learning and openness to giving and receiving feedback as a part of fostering individual and team development The base salary range for this role’s listed level is currently for residents of the EU, applicable in the specified country or countries only. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location and having regard to any applicable collective agreements. The base salary range does not include bonuses, equity, or benefits. Poland base salary range: 248,000zł- 372,000zł How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Montreal, Canada; United States ON-SITE IN MONTREAL IS PREFERRED; REMOTE OR HYBRID IS POSSIBLE FOR THE RIGHT CANDIDATE. Open for candidates in Canada as well as the US Role: As part of the System Engineering Department, the Satellite and Payload System Test Authority will be responsible for the définition of Test Plans, Test Methods and Requirements, Ground Test Equipment definition support, implementation and testing in support of Digital  Telecommunication satellite payloads. Tasks The Payload Test Authority engineer will perform, be responsible and participate in the following tasks and activities: Trade-off studies to design and develop Test Plans for Satellites and Payloads, aligning with verification & validation matrices and Program objectives Lead and develop Test Methods and Test requirements; oversee Test Procedures and their execution Lead a cross-disciplinary team to converge on methodology and integration of the tests in accordance with the program requirements. Maintain the verification & validation Matrices over the course of the program life cycle all the way to on-orbit commissioning in coordination with the SatOps team Lead and coordinate Satellite and payload testing: EGSE, Test supervision, data analysis, trending…Test reports Support the development of Satellite Operation Manuals and associated trainings. Develop and support In-Orbit Test (IOT) and anomaly resolution. Must haves · Bachelor’s degree in Electrical engineering in a relevant field · At least 10 years of relevant practical experience in digital communication commercial application in the space domain Previous experience with LEO/MEO/GEO satellite communication systems Understanding of Phased Array Antenna with multiple active elements and knowledge of various modulation types, signal processing and Networking Systems Engineering experience in concepts of space and ground segment, specification and integration, knowledge of Flight Software, Satellite Database · Knowledge of Python or other scripting languages Complementary skills/knowledge Previous experience in Constellation Operations Development and testing of new automated methodologies Knowledge of requirements Management tools such as DOORS/Windchill/Jama Demonstrated capability to efficiently work autonomously and with little to no supervision Strong written and verbal communications skills in English, knowledge of French will be considered favorably

Location: India; Singapore; Australia Workplace: Remote The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team!  What you will be doing: - Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision. - Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against. - Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end. - Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers. - Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward. - Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request. What you bring along: - Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python). - Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar. - Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them. - Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable. - Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns. - Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform. - Strong production debugging instincts and a high bar for systems that are easy to develop against. Bonus: - You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo. - You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes. - You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail. PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new eligible team member who joins our company receives equity. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: Germany; Portugal; France; United Kingdom; Italy; The Netherlands Workplace: Remote The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team!  What you will be doing: - Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision. - Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against. - Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end. - Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers. - Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward. - Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request. What you bring along: - Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python). - Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar. - Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them. - Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable. - Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns. - Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform. - Strong production debugging instincts and a high bar for systems that are easy to develop against. Bonus: - You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo. - You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes. - You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail. PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new eligible team member who joins our company receives equity. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.