Sr. Software Engineer - RBAC & Authorization

The role

You will architect and build the next generation of the authorization model including multi-level organization hierarchies and workspace isolation. You will implement authorization checks across APIs and build migration pipelines for live authorization models.

What you will do

• Architect and build the next generation of our authorization model
• Implement and enforce consistent authorization checks across all public and internal APIs
• Build tooling and migration pipelines to evolve live authorization models
• Partner cross-functionally with Product, Design, and Customer Identity teams

Required qualifications

• 6+ years building security platforms, access control engines, or core backend services at scale
• Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO
• Excellent TypeScript/Node.js fundamentals
• Strong schema design skills in PostgreSQL or relational stores
• Proven track record of executing live customer data migrations and building high-correctness systems

Nice to have

• Enterprise identity platforms
• IAM security tools
• zero-trust cloud infrastructure
• core authorization teams at major B2B SaaS companies

Benefits

• Flexible work environment
• Employer contributions towards your healthcare
• Stock options
• Flexible time off in the US, generous entitlement in other countries
• USD$500 Home office setup if you’re a remote employee
• Opportunities to engage with colleagues at company-wide offsites

About the company

ClickHouse is a globally distributed company that is remote-friendly and operates in over 25 countries.