Senior Backend Engineer (RoR), Software Supply Chain Security: Authorization jobs in United States
cer-icon
Apply on Employer Site
company-logo

GitLab · 4 hours ago

Senior Backend Engineer (RoR), Software Supply Chain Security: Authorization

GitLab is an open-core software company that develops an AI-powered DevSecOps Platform used by over 100,000 organizations. As a Senior Backend Engineer on the Authorization team, you'll architect and implement authorization infrastructure, impacting millions of users and collaborating with various teams to enhance security and performance.

Cloud SecurityDeveloper ToolsDevOpsOpen SourceSaaS
check
Comp. & Benefits

Responsibilities

Implement fine-grained permission systems for Job Tokens, Personal Access Tokens, the GitLab Duo Agent Platform, and other authentication mechanisms across the GitLab platform
Collaborate with Security, Authentication, Database, and Platform teams on authorization stack initiatives, aligning designs and implementation plans
Solve complex performance challenges in authorization, including query optimization, caching strategies, and database decomposition, with a focus on PostgreSQL
Design and evolve authorization systems that work across multiple deployment models and multi-tenant architectures while maintaining security and reliability
Drive improvements to authorization security, maintainability, and developer experience through code review, documentation, and technical leadership
Contribute to architectural decisions for authorization features with a long-term strategic view, balancing immediate needs with future scalability
Mentor and support other engineers in authorization patterns, policy-based access control, and secure coding practices in a fully remote, asynchronous environment
Contribute to frontend vue.js code, as needed

Qualification

Ruby on RailsAuthorization modelsPostgreSQL performance tuningPolicy-based authorizationDistributed systemsCollaboration skillsCommunication skillsTechnical leadership

Required

Professional experience building and maintaining production applications with Ruby on Rails or similar backend frameworks
Strong understanding of authorization models, including role-based access control, attribute-based access control, and fine-grained permission patterns
Experience designing and optimizing high-scale backend systems, including PostgreSQL performance tuning, query optimization, and effective caching strategies
Familiarity with or interest in policy-based authorization systems and modern policy languages such as Cedar or Rego
Understanding of core security principles, including threat modeling, least-privilege access, and zero-trust architectures
Experience working with distributed systems and service-to-service communication in a cloud or multi-tenant environment
Demonstrated ability to own complex technical initiatives from design through production deployment in an asynchronous, remote setting
Strong collaboration and communication skills, with openness to learning and applying transferable skills from adjacent domains or technologies

Benefits

Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental leave
Home office support

Company

GitLab is a web-based Git repository manager that offers a variety of features for software development teams.

Funding

Current Stage
Public Company
Total Funding
$413.5M
Key Investors
Goldman Sachs,ICONIQ GrowthICONIQ GrowthGoogle Ventures
2021-10-14IPO
2019-09-17Series E· $268M
2018-09-19Series D· $100M

Leadership Team

leader-logo
Bill Staples
Chief Executive Officer
linkedin
leader-logo
Sytse Sijbrandij
Co-founder and Executive Chair
linkedin
Company data provided by crunchbase