Senior Ruby engineer securing authorization across GitLab’s DevSecOps platform. Building fine-grained permissions and migrating policy enforcement to a Rust-based authorization stack.
Responsibilities
Own significant parts of the system determining what users, tokens, and automated agents can access across GitLab.com, Self-Managed, and Dedicated
Design and ship authorization changes in GitLab's Ruby on Rails monolith
Own workstreams end to end from problem definition through feature-flagged rollout, dual-run verification, and cleanup
Build and extend fine-grained permissions for tokens and roles
Maintain a coherent permission catalog
Extend and harden authorization enforcement across GraphQL and REST APIs
Refactor policy code so the monolith and new authorization engine can evaluate it without changing existing customer behavior
Improve reliability, performance, and security of authorization systems
Partner with authentication, platform, AI, and modular-service teams
Drive technical decisions through design documents, architecture decision records, and code review
Requirements
Significant experience building and operating production Ruby on Rails applications
Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions
Security mindset and ability to reason about blast radius
Comfort making careful changes to large, long-lived codebases
Experience with incremental refactors, feature-flagged rollouts, and migrations
Working knowledge of GraphQL and API authorization patterns
Understanding of performance at scale
Strong written communication
Helpful but not required: Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture
Transferable experience from adjacent domains such as identity, policy engines, and platform security
Ability to work in a fully asynchronous organization
Benefits
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Senior embedded engineer developing safety - critical ECU firmware for Hexagon Mining’s digital mining and vehicle - control technologies. Designing, testing, and commissioning embedded systems.
Staff Software Engineer building full - stack AI - powered healthcare workflows for exacare ai, whose platform transforms referral packets into clinical insights and placement decisions.
Senior Software Engineer building scalable TypeScript and AWS systems for exacare ai’s AI operating system for post - acute care. Owning healthcare workflow features from design through production.
Senior Full Stack Engineer expanding Infisical’s open source security infrastructure platform. Building secrets management, PKI, PAM, and KMS products with the engineering team.
Full Stack Engineer expanding Infisical’s open source security platform for secrets management, PKI, PAM, and KMS. Building secure developer infrastructure and AI - enabled security capabilities.
Principal Software Developer building Solace Agent Mesh, an event - driven platform connecting and orchestrating AI agents. Leading AI integration architecture, platform development, and technical innovation.
Full - Stack Digital Strategist developing multi - channel campaigns for luxury hotels, resorts, and experiential travel brands. Optimizing paid media, SEO, tracking, funnels, and client performance.
Guidewire technical lead shaping insurance digital transformation at Alithya. Designing scalable architectures, integrations, cloud migrations, and modernization solutions.
Senior Software Engineer building AlphaSense’s AI - powered Excel plugin for financial professionals. Optimizing Office integrations used by analysts at leading financial institutions.