Sr. Frontend Software Engineer - RBAC & Authorization
ClickHouse
About the role
About the Team The Access Control team owns authorization across ClickHouse Cloud. We design and enforce the roles and permissions model, organization hierarchies, API key management, and security boundaries that every product surface and tenant depends on. Having recently shipped custom roles and fine-grained access, we are now evolving our architecture to support our largest enterprise customer structures.
What You Will Do
Architect and build the next generation of our authorization model: multi-level organization hierarchies, workspace isolation, and resource-scoped roles.
Implement and enforce consistent authorization checks across all public and internal APIs.
Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption.
Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.
What We Are Looking For
Experience: 6+ years building security platforms, access control engines, or core backend services at scale.
Domain Expertise: Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.
Core Stack: Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores.
Migration Discipline: Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option.
Ideal Backgrounds: Enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies.
Perks
Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
Healthcare - Employer contributions towards your healthcare.
Equity in the company - Every new team member who joins our company receives stock options.
Time off - Flexible time off in the US, generous entitlement in other countries.
A USD$500 Home office setup if you’re a remote employee.
Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
Culture - We All Shape It
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.
Equal Opportunity & Privacy
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here for our Privacy Statement.
Responsibilities
- Architect and build authorization models for organization hierarchies, workspace isolation, and resource-scoped roles.
- Enforce consistent authorization checks across public and internal APIs.
- Build tooling and migration pipelines for live authorization models without downtime.
- Partner with Product, Design, and Customer Identity teams on permission management interfaces.
Qualifications
- 6+ years building security platforms, access control engines, or core backend services at scale.
- Deep knowledge of RBAC/ABAC, fine-grained permissions, multi-tenant isolation, API keys, and SAML/SSO.
- Strong TypeScript and Node.js fundamentals and schema design skills with PostgreSQL or relational databases.
- Experience executing live customer data migrations and building high-correctness systems.
- Background in enterprise identity, IAM security, zero-trust infrastructure, or authorization systems at B2B SaaS companies.
Benefits
- Flexible, remote-friendly work environment.
- Employer contributions toward healthcare.
- Stock options for new team members.
- Flexible time off in the US and generous time off in other countries.
- USD $500 home office setup allowance for remote employees.
- Company-wide gatherings and offsites.
Skills mentioned
About ClickHouse
ClickHouse is a fast, open-source columnar database built for real-time data processing and analytics at scale. ClickHouse Cloud delivers the query speed and concurrency that applications demanding instant insight from large volumes of data require. As AI agents become more embedded in software, generating higher query volumes at tighter latency, ClickHouse provides a high-throughput, low-latency engine purpose-built for that workload.
H-1B sponsorship history
Historical employer filing data was found for ClickHouse. The employer record includes 16 historical certified applications. This is employer-level history, not a guarantee that this role currently offers sponsorship.