Base Salary
$139k - $235k/yr
Responsibilities
- Design and ship authorization changes in GitLab’s Ruby on Rails monolith.
- Own workstreams from problem definition through feature-flagged rollout, dual-run verification, and cleanup.
- Build and extend fine-grained permissions for tokens and roles and maintain the permission catalog.
- Extend and harden authorization enforcement across GraphQL and REST APIs.
- Refactor policy code so it can be evaluated by both the monolith and the new authorization engine without changing existing behavior.
- Improve the reliability, performance, and security posture of authorization systems.
- Partner with authentication, platform, AI, and modular-service teams on shared authorization interfaces.
- Drive technical decisions through design documents, architecture decision records, and code review in an asynchronous organization.
Requirements
- Significant experience building and operating production Ruby on Rails applications.
- Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions.
- A security mindset with the ability to assess the blast radius of permission bugs.
- Comfort making careful incremental changes to large, long-lived codebases, including feature-flagged rollouts and behavior-preserving migrations.
- Working knowledge of GraphQL and API authorization patterns.
- Understanding of performance considerations at scale, including repeated permission checks per request.
- Strong written communication for document- and merge-request-driven collaboration.
- Helpful but not required: Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture.
- Transferable experience from identity, policy engines, or platform security is welcome.
Benefits
- Health, financial, and well-being benefits.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.
- Fully remote work arrangement with country-specific eligibility requirements.
About GitLab
GitLab is the Intelligent Orchestration Platform where software teams and their AI agents stay in flow to amplify their capacity for innovation. Together, they automate repetitive tasks to plan, build, secure, test, deploy and maintain software. With GitLab, software teams spend less time on coordination overhead and more time on the next big idea. GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle. Agents handle code generation, security analysis, code review, CI/CD troubleshooting, and custom workflows — while teams maintain control through enterprise governance. Build what's next with us. Explore open roles and join our talent community: https://about.gitlab.com/jobs/