Senior Frontend Software Engineer - RBAC & Authorization

at ClickHouse

📍 United States

USD 142,000-250,000 per year

SENIOR

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

API @ 7 ClickHouse Node.js @ 6 PostgreSQL @ 7 Security @ 7 TypeScript @ 6

Details

The Access Control team owns authorization across ClickHouse Cloud, including the roles and permissions model, organization hierarchies, API key management, and security boundaries that every product surface and tenant depends on. The team recently shipped custom roles and fine-grained access and is evolving its architecture to support large enterprise customer structures.

Responsibilities

Architect and build the next generation of the authorization model, including multi-level organization hierarchies, workspace isolation, and resource-scoped roles.
Implement and enforce consistent authorization checks across all public and internal APIs.
Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption.
Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.

Requirements

6+ years of experience building security platforms, access control engines, or core backend services at scale.
Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.
Excellent TypeScript and Node.js fundamentals.
Strong schema design skills in PostgreSQL or relational stores.
Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option.
Ideal backgrounds include enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies.

Benefits

Flexible work environment at a globally distributed, remote-friendly company operating in over 25 countries.
Employer contributions toward healthcare.
Stock options for every new team member.
Flexible time off in the United States and generous entitlement in other countries.
USD 500 home office setup allowance for remote employees.
Opportunities to engage with colleagues at company-wide offsites.

Equal Opportunity and Privacy

ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment based on factors including race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. See the ClickHouse Applicant Privacy Notice for additional information.