Sr. Frontend Software Engineer - RBAC & Authorization

ClickHouse is hiring a Senior Frontend Software Engineer for its Access Control team, which owns authorization across ClickHouse Cloud. The role focuses on evolving authorization architecture, enforcing permissions across APIs, building safe migration tooling, and delivering permission management interfaces with cross-functional teams.

Responsibilities:

• Architect and build the next generation of our authorization model: multi-level organization hierarchies, workspace isolation, and resource-scoped roles
• Implement and enforce consistent authorization checks across all public and internal APIs
• Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption
• Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs

Requirements:

• 6+ years building security platforms, access control engines, or core backend services at scale
• Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO
• Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores
• Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option