GitLab · 20 hours ago
Senior Backend Engineer (RoR), Software Supply Chain Security: Authorization
GitLab is an open-core software company that develops an AI-powered DevSecOps Platform used by over 100,000 organizations. As a Senior Backend Engineer on the Authorization team, you'll architect and implement authorization infrastructure, impacting millions of users and collaborating with various teams to enhance security and performance.
Cloud SecurityDeveloper ToolsDevOpsOpen SourceSaaS
Responsibilities
Implement fine-grained permission systems for Job Tokens, Personal Access Tokens, the GitLab Duo Agent Platform, and other authentication mechanisms across the GitLab platform
Collaborate with Security, Authentication, Database, and Platform teams on authorization stack initiatives, aligning designs and implementation plans
Solve complex performance challenges in authorization, including query optimization, caching strategies, and database decomposition, with a focus on PostgreSQL
Design and evolve authorization systems that work across multiple deployment models and multi-tenant architectures while maintaining security and reliability
Drive improvements to authorization security, maintainability, and developer experience through code review, documentation, and technical leadership
Contribute to architectural decisions for authorization features with a long-term strategic view, balancing immediate needs with future scalability
Mentor and support other engineers in authorization patterns, policy-based access control, and secure coding practices in a fully remote, asynchronous environment
Contribute to frontend vue.js code, as needed
Qualification
Required
Professional experience building and maintaining production applications with Ruby on Rails or similar backend frameworks
Strong understanding of authorization models, including role-based access control, attribute-based access control, and fine-grained permission patterns
Experience designing and optimizing high-scale backend systems, including PostgreSQL performance tuning, query optimization, and effective caching strategies
Familiarity with or interest in policy-based authorization systems and modern policy languages such as Cedar or Rego
Understanding of core security principles, including threat modeling, least-privilege access, and zero-trust architectures
Experience working with distributed systems and service-to-service communication in a cloud or multi-tenant environment
Demonstrated ability to own complex technical initiatives from design through production deployment in an asynchronous, remote setting
Strong collaboration and communication skills, with openness to learning and applying transferable skills from adjacent domains or technologies
Benefits
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental leave
Home office support
Company
GitLab
GitLab is a web-based Git repository manager that offers a variety of features for software development teams.
Funding
Current Stage
Public CompanyTotal Funding
$413.5MKey Investors
Goldman Sachs,ICONIQ GrowthICONIQ GrowthGoogle Ventures
2021-10-14IPO
2019-09-17Series E· $268M
2018-09-19Series D· $100M
Recent News
2026-01-24
2026-01-23
Company data provided by crunchbase