Senior Software Engineer — Access Control & IAM

ClickHouse; Oregon; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible work environment

Healthcare

Equity in the company

Stock options

Time off – flexible

Global gatherings

Remote-friendly – 25+ countries

Job summary

ClickHouse is expanding its Access Control team to design and enforce a robust authorization framework across our cloud platform. You will architect multi-level org hierarchies, workspace isolation, and resource-scoped roles while ensuring consistent checks across all APIs.

You will also build migrations that evolve live authorization models with zero downtime and partner with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.

Qualifications

• 6+ years building security platforms, access control engines, or core backend services at scale.
• Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.
• Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores.

Responsibilities

• Architect and build the next generation of authorization models: multi-level organization hierarchies, workspace isolation, and resource-scoped roles.
• Implement and enforce consistent authorization checks across all public and internal APIs.
• Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption.
• Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.

Skills

RBAC/ABAC models

TypeScript/Node.js

Schema design

Live data migrations

Tools

PostgreSQL

Node.js

TypeScript

Job description

ClickHouse is expanding its Access Control team to design and enforce a robust authorization framework across our cloud platform. You will architect multi-level org hierarchies, workspace isolation, and resource-scoped roles while ensuring consistent checks across all APIs.

You will also build migrations that evolve live authorization models with zero downtime and partner with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.