Refolk
Open nowEngineeringEngineering

Sr. Frontend Software Engineer - RBAC & Authorization

ClickHouse · San Francisco, United States

Location
San Francisco, United States
Workplace
Remote
Employment
Full time
Level
Senior
Posted
27 October

About this role

About the Team The Access Control team owns authorization across ClickHouse Cloud. We design and enforce the roles and permissions model, organization hierarchies, API key management, and security boundaries that every product surface and tenant depends on. Having recently shipped custom roles and fine-grained access, we are now evolving our architecture to support our largest enterprise customer structures.

What You Will Do

  • Architect and build the next generation of our authorization model: multi-level organization hierarchies, workspace isolation, and resource-scoped roles.

  • Implement and enforce consistent authorization checks across all public and internal APIs.

  • Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption.

  • Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.

What We Are Looking For

  • Experience: 6+ years building security platforms, access control engines, or core backend services at scale.

  • Domain Expertise: Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.

  • Core Stack: Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores.

  • Migration Discipline: Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option.

Ideal Backgrounds: Enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies.

Perks

  • Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.

  • Healthcare - Employer contributions towards your healthcare.

  • Equity in the company - Every new team member who joins our company receives stock options.

  • Time off - Flexible time off in the US, generous entitlement in other countries.

  • A USD$500 Home office setup if you’re a remote employee.

  • Global Gatherings - We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.

Culture - We All Shape It

As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.

Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.

Equal Opportunity & Privacy

ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Please see here for our Privacy Statement.

As published by ClickHouse. Applications are handled on their site.

Skills this posting mentions

Access ControlSAMLSSO

About ClickHouse

ClickHouse is a fast, open-source columnar database built for real-time data processing and analytics at scale. ClickHouse Cloud delivers the query speed and concurrency that applications demanding instant insight from large volumes of data require. As AI agents become more embedded in software, generating higher query volumes at tighter latency, ClickHouse provides a high-throughput, low-latency engine purpose-built for that workload.

All 207 openings at ClickHouse

One click, then it is written

Apply to ClickHouse with a resume written for this role.

Queue Sr. Frontend Software Engineer - RBAC & Authorization and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in ClickHouse’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at ClickHouse

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

Free, no card. Up to 25 applications sent a week, and nothing is sent until you say so.

Listed from the job board ClickHouse publishes. Refolk is not the employer and does not handle their hiring. Applications go to ClickHouse directly.

Hiring at ClickHouse? Post this role to the Refolk talent pool for $299, once. No commission, refunded if I find nobody. Post a role for $299