Database Developer

About the Role

We are seeking an exceptional Senior Engineer – Access Entitlements to design and scale the systems that discover, normalize, and reason about who has access to what across our customers' entire data estate — on-prem file shares, Active Directory, and SaaS platforms like SharePoint, Google Workspace, and Microsoft 365. You will build the connectors, pipelines, and graph models that turn millions of raw permission grants into an accurate, queryable picture of access across billions of files and identities, powering least-privilege analysis, access certification, and risk detection for enterprise customers

What You'll Do

• Entitlement Scanning: Build and extend connectors that enumerate identities (users, groups, service accounts, computers) and resource-level permissions (ACLs, role assignments, sharing links) across on-prem and SaaS data sources, handling per-connector quirks like SID resolution, inheritance breakage, and nested group membership
• Scale & Concurrency: Design entitlement pipelines that safely parallelize across large tenants — correctly handling shared state, batching, and checkpointing so a scan of hundreds of thousands of principals and files can pause, resume, and recover without data loss or duplication
• Data Modeling: Own the mapping from raw connector output to normalized entitlement records, and from those records into our identity graph — designing node/edge structures that represent principals, resources, and access grants (including sharing links and group-inherited access) in a way that supports fast traversal at scale
• Multi-Store Architecture: Work across the full data path — Elasticsearch for search-driven access, Databricks/Delta for large-scale analytical joins, and a Neptune-backed graph for relationship queries — making deliberate tradeoffs about what gets synced where, and keeping those stores consistent as data volume grows
• Entitlement-Activity Correlation: Build the pipelines that join static entitlements against observed activity logs to answer "who can access this, and who actually does" — the core signal behind over-permission detection and access-risk scoring
• Reliability & Correctness: Instrument and test for the failure modes unique to entitlement data — partial scans, malformed ACLs, race conditions in concurrent principal writes, and inconsistent state between graph and source-of-truth stores

What You'll Bring

• 6+ years of professional software engineering experience, with meaningful time spent on identity/access systems, security data pipelines, or large-scale distributed data processing
• Strong Go, Java, or Python skills, with direct experience writing concurrent/parallel data pipelines (goroutines, worker pools, or equivalent) and reasoning about race conditions and shared state
• Experience with graph databases or graph query languages (Gremlin, Cypher, or similar) and modeling relationship-heavy data
• Familiarity with Elasticsearch/OpenSearch and at least one large-scale analytical store (Databricks, Snowflake, BigQuery, Redshift)
• Understanding of identity and access concepts — RBAC, ACLs, group membership

Bonus Skills

• Experience with Microsoft Graph API, SharePoint REST APIs, or ActiveDirectory/LDAP-based identity systems
• Familiarity with AWS Neptune, TinkerPop/Gremlin, or other graph-native databases at production scale
• Background in DSPM, CIEM, IAM governance, or data security posture tooling
• Experience designing multi-tenant systems with per-tenant data isolation across search, analytical, and graph store

About the role

Responsibilities

• Own the reliability and performance of our production ClickHouse clusters, whether self-hosted on Kubernetes or running on managed ClickHouse services.
• Design a standard architecture and tooling that let us grow to dozens of multi-node clusters without the operational work growing at the same pace.
• Manage the whole cluster lifecycle as code: provisioning, configuration, scaling, upgrades, and migrations.
• Build monitoring and alerting that catch problems before users notice them.
• Own backups and disaster recovery, and test restores regularly.
• Keep clusters secure by default.
• Plan capacity and keep infrastructure costs under control.
• Be the go-to person on ClickHouse for developers, DevOps engineers, other DBAs, and engineering leadership, from schema design and data ingestion to query performance.
• Handle routine database requests and automate as many of them as you can.
• Step in during rare production emergencies, including outside business hours. Afterwards, lead the root-cause analysis on the database side and contribute to the postmortem.
• Keep documentation and runbooks up to date, and share what you know with the team.

Qualifications

• Deep, DBA-level knowledge of ClickHouse from running it in production. You should understand how it stores, merges, replicates, and queries data, and be able to explain why a cluster behaves the way it does. Strong SQL is part of this, including optimising complex analytical queries and reviewing schema design.
• Ability to design architecture and automation that holds up across dozens of multi-node clusters. Experience running a large fleet of databases (dozens or hundreds of instances) is a strong advantage, and the engine does not have to be ClickHouse.
• You have run and maintained stateful workloads on Kubernetes in production, well beyond the initial deployment.
• Production use of a Kubernetes operator to run databases. Any engine counts, for example CloudNativePG, Zalando Postgres Operator, Altinity, or the official ClickHouse operator.
• Experience with version upgrades, backup and restore, and migrating large datasets between clusters or regions with zero or minimal downtime.
• Strong troubleshooting skills across the whole stack, from queries and schema design down to Kubernetes, Linux, storage, and networking.
• A proactive approach to database health. You have built monitoring and alerting with any modern observability stack, and you act on early warning signs before they turn into incidents.
• Database security in practice: encryption in transit and at rest, access control, and secrets management.
• Infrastructure as code with any mainstream tool, plus at least one programming or scripting language for automation.
• You have hands-on experience with cloud infrastructure on any major provider, as opposed to only using a platform that another team runs.
• Clear communication, written and spoken, with engineers and with leadership, whether the subject is architecture, performance, an incident, a risk, or a cost. You should be able to take a problem from investigation to production fix on your own.
  
  

• Hands-on work on the source code of a Kubernetes operator for databases, as a developer or contributor.
• Practical use of AI tools for database observability or for automating routine operational tasks.
• A background in highly regulated environments.
• Any Kubernetes or cloud certifications.

Benefits

• Full-time B2B contract
• Fully remote setup
• Up to 20% tax allowance
• 22 paid leave days annually
• Stock options (ESOP) in a fast-scaling, pre-IPO company
• Flexi benefits you can use for wellness, travel, or learning
• Work alongside a high-performing, international engineering team in a global fintech unicorn

Mayflower is a technology company building highload products used by millions of people worldwide. Operating at the scale of one of the world's top-50 websites, we solve complex engineering challenges and create solutions that power real-time entertainment for a global audience.

We are looking for an experienced Database Infrastructure Engineer to join our Infrastructure team. Our goal is to ensure the reliability, scalability, security and performance of high-load relational database systems. The primary focus of this role is the administration and optimization of PostgreSQL and MariaDB clusters, automation via IaC, and the development of reliable HA/DR solutions.

Job Responsibilities

• Database Cluster Management: Deploy, administer, upgrade, and scale PostgreSQL and MariaDB clusters in high-load production environments;

• High Availability & Disaster Recovery: Design and maintain HA solutions, replication topologies, failover/switchover, backup/restore , and DR plan;

• Infrastructure as Code: Fully automate provisioning and configuration management using Terraform and Ansible;

• Performance Tuning: Analyze query execution plans, optimize indexes and database parameters, investigate locking and replication lag, and tune Linux kernel parameters for specific workload profiles;

• Observability: Configure monitoring, dashboards, logging, alerting, and SLOs for database services;

• Troubleshooting: Investigate incidents, analyze logs and metrics, identify performance bottlenecks, and participate in on-call activities;

• Automation: Develop tools and scripts for routine operations, health checks, failover validation, maintenance, and database lifecycle management.

You’ll thrive here if you have

• Experience: 3+ years as a DBA, DBRE, DevOps Engineer, or System Administrator with a strong focus on production relational databases;

• Deep understanding of PostgreSQL/MariaDB architecture and internal database processes;

• Building PostgreSQL/MariaDB high-availability architectures, replication, backup and performance tools;

• Experience HA soultions for PostgreSQL (Patroni, PgBouncer), MariaDB (MaxScale, Galera);

• Experience troubleshooting replication lag, deadlocks, locking issues, and transactional workloads;

• Hands-on experience testing failover scenarios and performing recovery from backups;

• Strong SQL and query optimization skills, analyze and profiling queries.

IaC & Automation:

• Strong proficiency in Terraform, including writing reusable modules and managing state files;

• Experience writing complex Ansible roles and playbooks.

Linux:

• Deep knowledge of Linux internals, filesystems, CPU, memory, disk I/O, networking, and kernel tuning for database workloads.

Observability:

• Experience with Prometheus/VictoriaMetrics, Grafana, and the ELK stack.

Scripting:

• Proficiency in Python or Bash for automation and operational tooling.

Big Plus:

• Kafka & Debezium: Experience configuring CDC pipelines from PostgreSQL or MariaDB using Debezium and Kafka Connect;

• Kubernetes & Helm: Experience running stateful database workloads in Kubernetes, including database operators;

• Cloud Platforms: Experience with managed database services and cloud infrastructure;

• Analytical & NoSQL Databases: Knowledge of ClickHouse, MongoDB, Redis or other distributed data platforms;

• Security: Experience with database access control, TLS, secrets management, auditing, and encryption;

• Programming: Experience supporting applications written in Java, Go, Python, or similar languages.

Conditions

We know that great talent deserves great conditions, so here's what you can expect when joining us:

• EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family.

• EU passport. Opportunity to obtain an EU passport after 4 years of residence

• Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free.

• Provident fund (Cypus): a long-term savings plan co-funded by you and the Company together (available after probation) that grows throughout your time with us in Cyprus.

• Transparent performance reviews twice a year, with bonus opportunities and salary adjustments.

• Private medical insurance for you and your family

• Corporate mobile plan (unlimited in Cyprus with roaming included)

• Mindfulness & well-being support, including psychological assistance with 50% coverage.

• 50% coverage of school and kindergarten fees for your children.

• Fully covered sports benefits, and also access to in-house electric scooters and bike rentals

• Professional growth support: language courses, conferences, training programs, and coaching.

• Peer recognition program: receive and share kudos for great work.

• A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration.

• Free breakfasts and lunches in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks.

• A strong engineering culture: international teams, corporate events, team buildings, and hackathons — because great work happens in great communities.

Recruitment process

• HR interview (45 minutes);

• Technical interview (1.5 hour);

• Final interview (1 hour);

• Recommendations check;

• Job Offer.