Sr. Frontend Software Engineer - RBAC & Authorization

What You Will Do

• Architect and build the next generation of our authorization model: multi-level organization hierarchies, workspace isolation, and resource-scoped roles.
• Implement and enforce consistent authorization checks across all public and internal APIs.
• Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption.
• Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.
• What We Are Looking For
• Experience: 6+ years building security platforms, access control engines, or core backend services at scale.
• Domain Expertise: Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.
• Core Stack: Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores.
• Migration Discipline: Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option.
• Ideal Backgrounds: Enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies.

Perks

• Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
• Healthcare - Employer contributions towards your healthcare.
• Equity in the company - Every new team member who joins our company receives stock options.
• Time off - Flexible time off in the US, generous entitlement in other countries.
• A USD$500 Home office setup if you’re a remote employee.
• Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.

Culture - We All Shape It

Equal Opportunity & Privacy

Qualifications

• 6+ years building security platforms, access control engines, or core backend services at scale.
• Domain Expertise: Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.
• Core Stack: Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores.
• Migration Discipline: Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option.
• Ideal Backgrounds: Enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies.