{"id":3352755,"url":"https://alion.io/job/clickhouse-sr-frontend-software-engineer-rbac-authorization","title":"Sr. Software Engineer - RBAC & Authorization","company":{"id":3448,"name":"ClickHouse","domain":"clickhouse.com","url":"https://alion.io/company/clickhouse","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":43,"ghost_share":0,"stale_share":0.674,"repost_share":0,"time_to_fill_p50_days":65,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":142000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"ClickHouse","optional":false},{"name":"IAM","optional":false},{"name":"Node JS","optional":false},{"name":"PostgreSQL","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-27T18:30:46Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-01T11:32:48Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About the Team The Access Control team owns authorization across ClickHouse Cloud. We design and enforce the roles and permissions model, organization hierarchies, API key management, and security boundaries that every product surface and tenant depends on. Having recently shipped custom roles and fine-grained access, we are now evolving our architecture to support our largest enterprise customer structures.\nWhat You Will Do\nArchitect and build the next generation of our authorization model: multi-level organization hierarchies, workspace isolation, and resource-scoped roles.\n\nImplement and enforce consistent authorization checks across all public and internal APIs.\n\nBuild tooling and migration pipelines to evolve live authorization models without downtime or customer disruption.\n\nPartner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.\n\nWhat We Are Looking For\nExperience: 6+ years building security platforms, access control engines, or core backend services at scale.\n\nDomain Expertise: Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.\n\nCore Stack: Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores.\n\nMigration Discipline: Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option.\n\nIdeal Backgrounds: Enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies.\nPerks\nFlexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.\n\nHealthcare - Employer contributions towards your healthcare.\n\nEquity in the company - Every new team member who joins our company receives stock options.\n\nTime off - Flexible time off in the US, generous entitlement in other countries.\n\nA USD$500 Home office setup if you’re a remote employee.\n\nGlobal Gatherings - We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.\n\nCulture - We All Shape It\nAs part of a rapidly scaling start-up, you will be instrumental in shaping our culture.\nAre you interested in finding out more about our culture? Learn more about our values here. Check out ourblog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.\nEqual Opportunity & Privacy\nClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.\nPlease see here for our Privacy Statement.","description_format":"text","description_chars":2993,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Flexible time off","Home office","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Warehouses & Lakehouses","Databases & DBMS"],"lifecycle":[{"event":"open","at":"2026-10-27T19:09:28Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 8 · green card filings: 1","filings_12m":8,"filings_prev_12m":7,"green_card_filings_12m":1,"median_offered_wage_usd":204167,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":65,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/clickhouse-sr-frontend-software-engineer-rbac-authorization","json_url":"https://alion.io/job/clickhouse-sr-frontend-software-engineer-rbac-authorization.json","meta":{"generated_at":"2026-11-01T15:26:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23672,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3448},"rest":"https://alion.io/mcp/rest/get_company?id=3448"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclickhouse-sr-frontend-software-engineer-rbac-authorization"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclickhouse-sr-frontend-software-engineer-rbac-authorization"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclickhouse-sr-frontend-software-engineer-rbac-authorization"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clickhouse-sr-frontend-software-engineer-rbac-authorization\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclickhouse-sr-frontend-software-engineer-rbac-authorization"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3352755}},{"tool":"search_jobs","arguments":{"company":"clickhouse.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3352755},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}