> Markdown version of [/jobs/ext/4599676-sr-software-engineer-rbac-authorization](https://www.wearedevelopers.com/jobs/ext/4599676-sr-software-engineer-rbac-authorization). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Software Engineer - RBAC & Authorization

- **Company:** ClickHouse, Inc.
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Cloud Computing, Cyber Security, Customer Data Management, Design of User Interfaces, Human-Computer Interaction, Identity and Access Management, Key Management, PostgreSQL, Role-Based Access Control, Security Assertion Markup Language (SAML), Software Engineering, TypeScript, Backend, Vertica
- **Published:** November 6, 2026
- **Apply:** https://www.careerbuilder.com/job-details/sr-software-engineer-rbac-authorization-san-francisco-ca--ca189699-f6fb-485a-8cce-7c2a190d6bae

## About the Role

Software Engineering, Cloud Computing, Access Control, Application Programming Interface (API), Machine Tool, Cross-Functional, User Interface/Experience (UI/UX), Product Design, Security Infrastructure, Security Assertion Markup Language (SAML), * Experience: 6+ years building security platforms, access control engines, or core backend services at scale.

 * Domain Expertise: Deep knowledge of RBAC/ABAC policy models, fine-grained permission enforcement, multi-tenancy isolation, API keys, and SAML/SSO.
 * Core Stack: Excellent TypeScript/Node.js fundamentals and strong schema design skills in PostgreSQL or relational stores.
 * Migration Discipline: Proven track record of executing live customer data migrations and building high-correctness systems where failure is not an option.

Ideal Backgrounds: Enterprise identity platforms, IAM security tools, zero-trust cloud infrastructure, or core authorization teams at major B2B SaaS companies.

## Description

About the Team The Access Control team owns authorization across ClickHouse Cloud. We design and enforce the roles and permissions model, organization hierarchies, API key management, and security boundaries that every product surface and tenant depends on. Having recently shipped custom roles and fine-grained access, we are now evolving our architecture to support our largest enterprise customer structures.

What You Will Do

 * Architect and build the next generation of our authorization model: multi-level organization hierarchies, workspace isolation, and resource-scoped roles.
 * Implement and enforce consistent authorization checks across all public and internal APIs.
 * Build tooling and migration pipelines to evolve live authorization models without downtime or customer disruption.
 * Partner cross-functionally with Product, Design, and Customer Identity teams to deliver seamless permission management UIs.