Opportunity at
GitLabSenior Software Engineer (Ruby), Security Platform: Authorization
GitLab is seeking a Senior Software Engineer to join the Authorization team within its DevSecOps platform. In this position, you will help manage and evolve the…
Career Tools
About This Role
GitLab is seeking a Senior Software Engineer to join the Authorization team within its DevSecOps platform. In this position, you will help manage and evolve the security systems that control access for users, automated agents, and tokens across GitLab.com, Self-Managed, and Dedicated deployments. The work involves developing and maintaining policy code written in Ruby on Rails, while simultaneously helping migrate the existing permission structure toward a newer Rust-based authorization engine…
Job Description
GitLab is seeking a Senior Software Engineer to join the Authorization team within its DevSecOps platform. In this position, you will help manage and evolve the security systems that control access for users, automated agents, and tokens across GitLab.com, Self-Managed, and Dedicated deployments. The work involves developing and maintaining policy code written in Ruby on Rails, while simultaneously helping migrate the existing permission structure toward a newer Rust-based authorization engine utilizing Zanzibar-style relationship tuples and Cedar policies.
This role is well-suited for engineers experienced in backend web application development and API security who enjoy tackling intricate architectural changes. You will drive complete workstreams from initial design to feature-flagged rollout and cleanup, working asynchronously within a globally distributed team. GitLab operates as an equal opportunity employer and maintains a commitment to fair employment practices regardless of protected characteristics.
Responsibilities
- Design and ship authorization changes within the Ruby on Rails monolith where single requests can trigger numerous permission checks
- Own complete workstreams from problem definition through feature-flagged rollout, dual-run verification, and cleanup
- Build and extend fine-grained permissions for tokens and custom roles while keeping the permission catalog coherent
- Harden authorization enforcement across GraphQL and the REST API
- Refactor long-lived policy code to allow evaluation by both the monolith and the new authorization engine without altering user behavior
- Improve reliability, performance, and security posture of current authorization systems while resolving permission-model debt
- Partner with authentication, platform, AI, and modular-service teams on interface contracts
- Drive technical decisions in writing through design documents, architecture decision records, and code reviews
Requirements
- Significant experience building and operating production Ruby on Rails applications
- Background in designing or implementing authorization systems including role-based access control and fine-grained permissions
- Demonstrated security mindset with an emphasis on blast radius and permission bug evaluation
- Comfort making careful changes to large and long-lived codebases via incremental refactors and feature-flagged rollouts
- Working knowledge of GraphQL and API authorization patterns
- Attention to scale and performance regarding uncached permission checks
- Strong written communication skills suited for an asynchronous organization
Qualifications
- Hands-on PostgreSQL experience
- Familiarity with Rust
- Experience with gRPC or Protocol Builders
- Knowledge of Cedar or other policy languages
- Familiarity with Zanzibar-style authorization systems
- Experience with Go or service-oriented architectures
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
This position is full-time.
Where is the job located?
The specific location is not stated in the job posting, though the company notes that all roles are remote while some may carry specific location-based eligibility requirements.
What is the salary range for this position?
The base salary range listed for United States residents is between $139,200 and $235,200 USD, determined through interviews and factors such as experience and geographic location. Salaries for locations outside the US or bonuses and equity are not specified beyond standard compensation plans.
How can I apply if I do not meet every single requirement?
The posting encourages candidates with varying levels of experience to apply, noting that recruiters will assess applications even if applicants do not meet every qualification.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.