Администратор баз данных PostgreSQL

About the Role

We are currently seeking a Database Developer to join us in working on our products.

What You’ll Do

• Development and support of database structures and objects, writing queries and stored procedures (PostgreSQL, MS SQL)
• Optimization of the existing database structure and code
• Modernization and creation of new reports, widgets, and dashboards for Reporting products (a new one and Veeam ONE)
• Migrating and reworking the current business logic to a new, modern architecture in the current product and adapting it for the new product
• Working closely with teams of analysts and QA

Technologies we work with:  

• PostgreSQL, pgTAP or analogs, TFS + Git, MS SQL, T-SQL

What You’ll Bring

• 3+ years of experience with commercial products
• Hands-on experience with PostgreSQL
• Strong knowledge of database theory
• Ability to write complex SQL scripts, functions, and stored procedures
• Comfortable reading, understanding, and maintaining existing code
• Flexibility and willingness to learn
• Ownership mindset: reliable, detail-oriented, disciplined, and able to deliver efficiently

What You’ll Get 

• 26 paid days off annually, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Paid parental, maternity, and paternity leave
• Fully covered family medical plan, dental, rehab, and vaccinations
• Life, critical illness, and disability insurance
• Employer pension contribution via PPK
• Monthly Edenred allowance of 450 PLN for meals
• MultiSport card fully covered by Veeam, giving access to sports facilities nationwide
• Up to 12 free therapy sessions annually, plus legal and financial advice
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

Please note: If the applicant is permanently present outside of Poland, Veeam reserves the right to refuse to consider the application for a job. Remote job is only possible in case the employee is located in Poland.

#LI-VE1

About the Role

We are seeking an exceptional Senior Engineer – Access Entitlements to design and scale the systems that discover, normalize, and reason about who has access to what across our customers' entire data estate — on-prem file shares, Active Directory, and SaaS platforms like SharePoint, Google Workspace, and Microsoft 365. You will build the connectors, pipelines, and graph models that turn millions of raw permission grants into an accurate, queryable picture of access across billions of files and identities, powering least-privilege analysis, access certification, and risk detection for enterprise customers

What You'll Do

• Entitlement Scanning: Build and extend connectors that enumerate identities (users, groups, service accounts, computers) and resource-level permissions (ACLs, role assignments, sharing links) across on-prem and SaaS data sources, handling per-connector quirks like SID resolution, inheritance breakage, and nested group membership
• Scale & Concurrency: Design entitlement pipelines that safely parallelize across large tenants — correctly handling shared state, batching, and checkpointing so a scan of hundreds of thousands of principals and files can pause, resume, and recover without data loss or duplication
• Data Modeling: Own the mapping from raw connector output to normalized entitlement records, and from those records into our identity graph — designing node/edge structures that represent principals, resources, and access grants (including sharing links and group-inherited access) in a way that supports fast traversal at scale
• Multi-Store Architecture: Work across the full data path — Elasticsearch for search-driven access, Databricks/Delta for large-scale analytical joins, and a Neptune-backed graph for relationship queries — making deliberate tradeoffs about what gets synced where, and keeping those stores consistent as data volume grows
• Entitlement-Activity Correlation: Build the pipelines that join static entitlements against observed activity logs to answer "who can access this, and who actually does" — the core signal behind over-permission detection and access-risk scoring
• Reliability & Correctness: Instrument and test for the failure modes unique to entitlement data — partial scans, malformed ACLs, race conditions in concurrent principal writes, and inconsistent state between graph and source-of-truth stores

What You'll Bring

• 6+ years of professional software engineering experience, with meaningful time spent on identity/access systems, security data pipelines, or large-scale distributed data processing
• Strong Go, Java, or Python skills, with direct experience writing concurrent/parallel data pipelines (goroutines, worker pools, or equivalent) and reasoning about race conditions and shared state
• Experience with graph databases or graph query languages (Gremlin, Cypher, or similar) and modeling relationship-heavy data
• Familiarity with Elasticsearch/OpenSearch and at least one large-scale analytical store (Databricks, Snowflake, BigQuery, Redshift)
• Understanding of identity and access concepts — RBAC, ACLs, group membership

Bonus Skills

• Experience with Microsoft Graph API, SharePoint REST APIs, or ActiveDirectory/LDAP-based identity systems
• Familiarity with AWS Neptune, TinkerPop/Gremlin, or other graph-native databases at production scale
• Background in DSPM, CIEM, IAM governance, or data security posture tooling
• Experience designing multi-tenant systems with per-tenant data isolation across search, analytical, and graph store

About the role

Responsibilities

• Own the reliability and performance of our production ClickHouse clusters, whether self-hosted on Kubernetes or running on managed ClickHouse services.
• Design a standard architecture and tooling that let us grow to dozens of multi-node clusters without the operational work growing at the same pace.
• Manage the whole cluster lifecycle as code: provisioning, configuration, scaling, upgrades, and migrations.
• Build monitoring and alerting that catch problems before users notice them.
• Own backups and disaster recovery, and test restores regularly.
• Keep clusters secure by default.
• Plan capacity and keep infrastructure costs under control.
• Be the go-to person on ClickHouse for developers, DevOps engineers, other DBAs, and engineering leadership, from schema design and data ingestion to query performance.
• Handle routine database requests and automate as many of them as you can.
• Step in during rare production emergencies, including outside business hours. Afterwards, lead the root-cause analysis on the database side and contribute to the postmortem.
• Keep documentation and runbooks up to date, and share what you know with the team.

Qualifications

• Deep, DBA-level knowledge of ClickHouse from running it in production. You should understand how it stores, merges, replicates, and queries data, and be able to explain why a cluster behaves the way it does. Strong SQL is part of this, including optimising complex analytical queries and reviewing schema design.
• Ability to design architecture and automation that holds up across dozens of multi-node clusters. Experience running a large fleet of databases (dozens or hundreds of instances) is a strong advantage, and the engine does not have to be ClickHouse.
• You have run and maintained stateful workloads on Kubernetes in production, well beyond the initial deployment.
• Production use of a Kubernetes operator to run databases. Any engine counts, for example CloudNativePG, Zalando Postgres Operator, Altinity, or the official ClickHouse operator.
• Experience with version upgrades, backup and restore, and migrating large datasets between clusters or regions with zero or minimal downtime.
• Strong troubleshooting skills across the whole stack, from queries and schema design down to Kubernetes, Linux, storage, and networking.
• A proactive approach to database health. You have built monitoring and alerting with any modern observability stack, and you act on early warning signs before they turn into incidents.
• Database security in practice: encryption in transit and at rest, access control, and secrets management.
• Infrastructure as code with any mainstream tool, plus at least one programming or scripting language for automation.
• You have hands-on experience with cloud infrastructure on any major provider, as opposed to only using a platform that another team runs.
• Clear communication, written and spoken, with engineers and with leadership, whether the subject is architecture, performance, an incident, a risk, or a cost. You should be able to take a problem from investigation to production fix on your own.
  
  

• Hands-on work on the source code of a Kubernetes operator for databases, as a developer or contributor.
• Practical use of AI tools for database observability or for automating routine operational tasks.
• A background in highly regulated environments.
• Any Kubernetes or cloud certifications.

Benefits

• Full-time B2B contract
• Fully remote setup
• Up to 20% tax allowance
• 22 paid leave days annually
• Stock options (ESOP) in a fast-scaling, pre-IPO company
• Flexi benefits you can use for wellness, travel, or learning
• Work alongside a high-performing, international engineering team in a global fintech unicorn