GitLab logo
    G

    Senior Software Engineer (Ruby), Security Platform: Authorization

    GitLab
    Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States•Canada•Israel•United Kingdom•United States of America
    Remote
    Senior
    Full Time
    💰$139,200 - $235,200
    remoteruby on railsauthorizationseniorsoftware engineer

    Requirements

    • •Significant experience building and operating production Ruby on Rails applications
    • •Experience designing or implementing authorization systems including role-based access control and fine-grained permissions
    • •A security mindset treating permission bugs as security bugs and reasoning about blast radius
    • •Comfort making careful changes to large, long-lived codebases with incremental refactors and feature-flagged rollouts
    • •Working knowledge of GraphQL and API authorization patterns
    • •Attention to performance at scale understanding impact of uncached checks
    • •Strong written communication skills effective in asynchronous decision making

    What You'll Do

    • •Design and ship authorization changes in GitLab's Ruby on Rails monolith
    • •Own a workstream end to end from problem definition through feature-flagged rollout, dual-run verification, and cleanup
    • •Build and extend fine-grained permissions for tokens and roles
    • •Keep the permission catalog coherent as it grows
    • •Extend and harden authorization enforcement across GraphQL and the REST API
    • •Refactor long-lived policy code for dual evaluation by monolith and new authorization engine without changing behavior
    • •Improve reliability, performance, and security posture of existing authorization systems
    • •Partner with authentication, platform, AI, and modular-service teams on interface contracts
    • •Drive technical decisions in writing including design docs, architecture decision records, and code review

    Nice to Have

    • •Experience with Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture
    • •Transferable experience from adjacent domains such as identity, policy engines, and platform security

    Benefits

    • •Benefits to support health, finances, and well-being
    • •Flexible Paid Time Off
    • •Team Member Resource Groups
    • •Equity Compensation & Employee Stock Purchase Plan
    • •Growth and Development Fund
    • •Parental Leave

    About GitLab

    GitLab is a web-based Git repository manager that offers a variety of features for software development teams.

    San Francisco, CA, US
    1000 - 5000
    Developer Tools