20 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Own the technical direction for OAuth 2.0, OIDC, SAML, token exchange, and authentication protocols across GitLab platforms.
- Write architecture documents and ADRs for multi-quarter initiatives and break them into feature-flagged increments.
- Lead safe migrations involving token formats, client and grant state, and session behavior across GitLab.com, Self-Managed, and Dedicated.
- Implement complex authentication functionality in Ruby on Rails and Go and review other engineers’ designs and merge requests.
- Coordinate interface contracts with GATE Core, GATE Infra, Authorization, and Tenant Scale teams.
- Threat-model new authentication flows, add rate limits and abuse controls, and lead technical responses to authentication incidents.
- Mentor senior and intermediate engineers and improve the team’s protocol and security expertise.
- Collaborate asynchronously across India, Europe, and the Americas and participate in on-call or operational support as required.
Requirements
- Significant experience building and running production authentication or identity systems at scale with cross-team technical leadership.
- Deep hands-on knowledge of OAuth 2.0 and OIDC, including PKCE, refresh token rotation, token exchange, client registration, scopes, JWTs, signing keys, and key rotation.
- Working knowledge of SAML 2.0 single sign-on and enterprise identity integration such as LDAP or SCIM.
- Strong production experience in Ruby on Rails or Go, with willingness to work in both languages.
- Experience with careful refactoring, feature-flagged rollouts, and backward-compatible migrations in large, long-lived codebases.
- Experience with multi-tenant SaaS systems, data isolation, and performance under high request volume.
- Security-focused understanding of token theft, replay, revocation, and blast radius.
- Clear written English and comfort working in an all-remote, asynchronous company.
- Optional qualifications include experience with Doorkeeper, Devise, OmniAuth, passkeys, multi-factor authentication, workload identity, gateways, policy engines, AI agent authentication, multi-region architectures, or open-source identity projects.
Benefits
- All roles are remote, with possible location-based eligibility requirements.
- Benefits supporting health, finances, and well-being.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.
About GitLab
GitLab builds a DevSecOps platform that unifies source code management, CI/CD, and security with AI-assisted workflows for software teams and enterprises. It sells cloud-hosted and self-managed subscriptions, plus enterprise features and support. Founded in 2014 and headquartered in San Francisco, GitLab is a public company listed on NASDAQ and is widely used by large enterprises, including many in the Fortune 100.