Sr. Frontend Software Engineer - RBAC & Authorization

ClickHouse builds the open source analytics database of the same name and the ClickHouse Cloud service. It is a globally distributed, remote-friendly company working in more than 25 countries.

The Access Control team owns authorisation across ClickHouse Cloud: the roles and permissions model, organisation hierarchies, API key management and the security boundaries every tenant depends on. Having shipped custom roles and fine-grained access, the team is now reworking the model for the largest enterprise customers. You would design multi-level organisation hierarchies, workspace isolation and resource-scoped roles, enforce consistent authorisation checks across public and internal APIs, build tooling to migrate live authorisation data without downtime, and work with product and design on permission management UIs.

They want 6+ years building security platforms, access control engines or core backend services at scale, deep knowledge of RBAC and ABAC models, multi-tenancy, API keys and SAML/SSO, strong TypeScript and Node.js, and good schema design in PostgreSQL. A track record of careful live data migrations matters.

Pay is $142,000 to $250,000 plus stock options, with healthcare contributions, flexible time off, a home office budget and company offsites. Remote in the United States.