3 days ago
Bengaluru, IndiaMid Level
Responsibilities
- Implement authorization changes in GitLab’s Ruby on Rails monolith so intended access is allowed and unauthorized access is denied.
- Deliver scoped workstreams through feature-flagged rollout and verify that legacy and new authorization systems produce equivalent results.
- Build and extend fine-grained permissions for tokens and roles across additional resources.
- Enforce intended permissions consistently across GraphQL and REST APIs.
- Refactor long-lived policy code incrementally while preserving existing customer behavior.
- Investigate and resolve reliability, performance, and security issues in permission checks.
- Collaborate with authentication, platform, and AI teams to document interface contracts for shared authorization services.
- Contribute to design documents, merge requests, and asynchronous code reviews.
Requirements
- Typically 2 to 4 or more years of experience building and maintaining production Ruby on Rails applications.
- Hands-on experience with authorization concepts such as role-based access control or fine-grained permissions.
- A security-focused approach to evaluating permission changes and their potential impact.
- Experience making careful changes to existing codebases, including incremental refactoring and feature-flagged rollouts.
- Familiarity with GraphQL or API authorization patterns.
- Awareness of the performance impact of repeated permission checks.
- Strong written communication and effectiveness in an asynchronous, document- and merge-request-driven environment.
- PostgreSQL experience is helpful but not required.
- Rust, gRPC, Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture experience is helpful but not required.
- Transferable experience from identity, policy engines, or platform security is welcomed.
Benefits
- Fully remote work arrangement with country-specific eligibility requirements.
- Benefits supporting health, finances, and well-being.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.
Tech Stack
Categories
About GitLab
GitLab builds a DevSecOps platform that unifies source code management, CI/CD, and security with AI-assisted workflows for software teams and enterprises. It sells cloud-hosted and self-managed subscriptions, plus enterprise features and support. Founded in 2014 and headquartered in San Francisco, GitLab is a public company listed on NASDAQ and is widely used by large enterprises, including many in the Fortune 100.