Senior Software Engineer, Ruby – Security Platform: Authorization

Job not on LinkedIn

🔥 0 minutes ago

🌐 United States, Canada, +2 more countries – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote 🇮🇱 Israel – Remote 🇬🇧 United Kingdom – Remote

💵 $139.2k - $235.2k / year

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Own significant parts of the system determining what users, tokens, and automated agents can access across GitLab.com, Self-Managed, and Dedicated • Design and ship authorization changes in GitLab's Ruby on Rails monolith • Own workstreams end to end from problem definition through feature-flagged rollout, dual-run verification, and cleanup • Build and extend fine-grained permissions for tokens and roles • Maintain a coherent permission catalog • Extend and harden authorization enforcement across GraphQL and REST APIs • Refactor policy code so the monolith and new authorization engine can evaluate it without changing existing customer behavior • Improve reliability, performance, and security of authorization systems • Partner with authentication, platform, AI, and modular-service teams • Drive technical decisions through design documents, architecture decision records, and code review

🎯 Requirements

• Significant experience building and operating production Ruby on Rails applications • Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions • Security mindset and ability to reason about blast radius • Comfort making careful changes to large, long-lived codebases • Experience with incremental refactors, feature-flagged rollouts, and migrations • Working knowledge of GraphQL and API authorization patterns • Understanding of performance at scale • Strong written communication • Helpful but not required: Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture • Transferable experience from adjacent domains such as identity, policy engines, and platform security • Ability to work in a fully asynchronous organization

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave