Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States•Canada•Israel•United Kingdom•United States of America
Remote
Senior
Full Time
💰$139,200 - $235,200
remoteruby on railsauthorizationseniorsoftware engineer
Requirements
- •Significant experience building and operating production Ruby on Rails applications
- •Experience designing or implementing authorization systems including role-based access control and fine-grained permissions
- •A security mindset treating permission bugs as security bugs and reasoning about blast radius
- •Comfort making careful changes to large, long-lived codebases with incremental refactors and feature-flagged rollouts
- •Working knowledge of GraphQL and API authorization patterns
- •Attention to performance at scale understanding impact of uncached checks
- •Strong written communication skills effective in asynchronous decision making
What You'll Do
- •Design and ship authorization changes in GitLab's Ruby on Rails monolith
- •Own a workstream end to end from problem definition through feature-flagged rollout, dual-run verification, and cleanup
- •Build and extend fine-grained permissions for tokens and roles
- •Keep the permission catalog coherent as it grows
- •Extend and harden authorization enforcement across GraphQL and the REST API
- •Refactor long-lived policy code for dual evaluation by monolith and new authorization engine without changing behavior
- •Improve reliability, performance, and security posture of existing authorization systems
- •Partner with authentication, platform, AI, and modular-service teams on interface contracts
- •Drive technical decisions in writing including design docs, architecture decision records, and code review
Nice to Have
- •Experience with Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture
- •Transferable experience from adjacent domains such as identity, policy engines, and platform security
Benefits
- •Benefits to support health, finances, and well-being
- •Flexible Paid Time Off
- •Team Member Resource Groups
- •Equity Compensation & Employee Stock Purchase Plan
- •Growth and Development Fund
- •Parental Leave
