Imprivata→
Platform Engineer, ClickHouse at Imprivata in Waltham, MA
Skills
Job Description
Ready to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.
We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.
When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.
We are seeking a Platform Engineer, ClickHouse to join our team. This is a hybrid opportunity based out of our Waltham, MA; Austin, TX; OR St. Petersburg, FL offices.
Job Summary
Duties and Responsibilities
- Administer ClickHouse clusters across development, QA, and production, including upgrades, configuration, capacity, and performance tuning.
- Operate and secure managed Kafka-to-ClickHouse ingestion paths, including Kafka Connect sinks (or equivalent), topic-to-table mappings, and credential rotation.
- Integrate ClickHouse with AWS services, including IAM roles, S3 backups and imports, networking, etc.
- Manage schema changes through migration tooling and CI/CD pipelines, ensuring repeatable promotion across lower and production environments.
- Define and enforce access controls, including per-product databases, scoped users, role-based grants, and row-level security for tenant isolation.
- Monitor cluster health, query performance, and ingestion lag, and respond to incidents with documented runbooks and post-incident reviews.
- Govern environment parity, secrets handling, and change approvals to keep production safe while enabling fast iteration in lower environments.
- Partner with data, application, and security teams to review schema designs, query patterns, and data retention policies.
- Other duties as assigned and required.
Required Qualifications
- Bachelor's degree in Computer Science, Engineering, or a related technical field.
- 3+ years of experience administering or operating analytical, columnar, or distributed databases, including ClickHouse or similar platforms.
- Working knowledge of Kafka, Kafka Connect, or other streaming ingestion into analytical stores.
- Hands-on experience with AWS services relevant to data platforms, including IAM, S3, VPC networking, etc.
- Working knowledge of Kubernetes, Helm, and CI/CD tooling for database schema migrations and platform deployments.
- Strong familiarity with database security practices, including user and role management, secret rotation, and audit logging.
This position offers a total compensation range of $115,000.00 to $153,000.00 (inclusive of base salary and variable compensation, such as bonuses and incentives). In addition, more information about Imprivata’s benefit offerings can be found here. This range represents the high and low end of Imprivata’s compensation range for this position. Actual compensation will vary and may be above or below the range based on various factors, such as a candidate’s location, skills, experience, and qualifications.
At Imprivata, we have a top-notch work environment, developmental opportunities, a competitive total rewards package, and the desire to have fun. If you have the skills and qualifications as we have described above, we want to hear from you!
Imprivata provides equal employment opportunities, regardless of race, religion, age, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
#LI-Hybrid #LI-SF1