Senior Software Engineer, Ruby – Security Platform: Authorization

Posted last month

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Senior Ruby engineer securing authorization across GitLab’s DevSecOps platform. Building fine-grained permissions and migrating policy enforcement to a Rust-based authorization stack.

Responsibilities

  • Own significant parts of the system determining what users, tokens, and automated agents can access across GitLab.com, Self-Managed, and Dedicated
  • Design and ship authorization changes in GitLab's Ruby on Rails monolith
  • Own workstreams end to end from problem definition through feature-flagged rollout, dual-run verification, and cleanup
  • Build and extend fine-grained permissions for tokens and roles
  • Maintain a coherent permission catalog
  • Extend and harden authorization enforcement across GraphQL and REST APIs
  • Refactor policy code so the monolith and new authorization engine can evaluate it without changing existing customer behavior
  • Improve reliability, performance, and security of authorization systems
  • Partner with authentication, platform, AI, and modular-service teams
  • Drive technical decisions through design documents, architecture decision records, and code review

Requirements

  • Significant experience building and operating production Ruby on Rails applications
  • Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions
  • Security mindset and ability to reason about blast radius
  • Comfort making careful changes to large, long-lived codebases
  • Experience with incremental refactors, feature-flagged rollouts, and migrations
  • Working knowledge of GraphQL and API authorization patterns
  • Understanding of performance at scale
  • Strong written communication
  • Helpful but not required: Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture
  • Transferable experience from adjacent domains such as identity, policy engines, and platform security
  • Ability to work in a fully asynchronous organization

Benefits

  • Benefits to support your health, finances, and well-being
  • Flexible Paid Time Off
  • Team Member Resource Groups
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental Leave

Job type

Full Time

Experience level

Senior

Salary

$139,200 - $235,200 per year

Degree requirement

No Education Requirement

Tech skills

GraphQLGRPCRubyRuby on RailsRustGo

Location requirements

RemoteUnited States

Report this job

Found something wrong with the page? Please let us know by submitting a report below.