Engineering Manager, Software Supply Chain Security: Auth Infrastructure

GitLab; Canada; Remote; CAD 180,000 - 388,000; Full time

Job summary

A software development company is seeking an Engineering Manager for their Software Supply Chain Security team. The role focuses on leading the Auth Infrastructure team, responsible for building authentication and authorization components at scale. Ideal candidates will have substantial engineering management experience, expertise in proxy technologies, and a strong background in Go or Rust. The position is fully remote, allowing for flexible work arrangements.

Qualifications

• Significant engineering management experience with a focus on infrastructure and distributed systems.
• Deep expertise in proxy technologies including Envoy and nginx.
• Strong background in Go and/or Rust for building high-performance infrastructure services.

Responsibilities

• Lead the design and implementation of GitLab's authentication infrastructure layer.
• Drive performance optimization for authentication decisions at scale.
• Implement infrastructure monitoring, observability, and debugging capabilities.

Skills

Engineering management experience

Proxy technologies expertise

DB technologies knowledge

Go and/or Rust experience

Service mesh architecture knowledge

gRPC and REST APIs expertise

Kubernetes knowledge

Infrastructure automation skills

Strong debugging skills

Job description

Overview

Engineering Manager, Software Supply Chain Security: Auth Infrastructure — Remote, Canada; Remote, US

GitLab is an open-core software company that develops the AI-powered DevSecOps Platform used by more than 100,000 organizations. This role leads the Auth Infrastructure team, building the foundational components for authentication and authorization at scale and supporting our move toward zero-trust architecture. The focus is on nurturing the team, hiring top talent, and delivering secure, reliable identity services across GitLab deployment models.

Responsibilities

• Lead the design and implementation of GitLab\'s authentication infrastructure layer, including Envoy proxy configuration, token services, and policy decision infrastructure
• Address infrastructure challenges such as bi-directional gRPC tunnels, mTLS, short-lived certificate management, and service mesh architecture
• Ensure infrastructure supports multiple deployment models: GitLab.com (millions of users), self-managed, Dedicated, and air-gapped environments
• Drive performance optimization for authentication decisions at scale
• Implement infrastructure monitoring, observability, and debugging capabilities for distributed authentication systems

What You'll Bring

• Significant engineering management experience with a focus on infrastructure and distributed systems
• Deep expertise in proxy technologies (Envoy, Traefik, HAProxy, nginx) and edge routing
• Experience with DB technologies and storage (e.g., RDS, Google Spanner, Postgres)
• Strong background in Go and/or Rust for building high-performance infrastructure services
• Experience with service mesh architectures, mTLS, and zero-trust networking
• Expertise in gRPC, REST APIs, and service-to-service communication patterns
• Understanding of token systems (JWT, Macaroons), cryptographic signing, and key management
• Knowledge of Kubernetes, container orchestration, and cloud-native deployment patterns
• Proven track record of building and scaling engineering teams focused on infrastructure
• Experience with infrastructure automation, CI/CD, and GitOps practices
• Strong debugging and performance optimization skills for distributed systems

About the Team

The Auth Infrastructure team is one of three authentication-focused teams within GitLab\'s Software Supply Chain Security stage, created to provide the infrastructure foundation for GitLab\'s authentication transformation. The team tackles challenging problems in distributed systems, including high-throughput proxy layers, zero-downtime migrations, resilient token services, and scalable policy-based authorization.

Collaboration

• Work with Authentication & Authorization teams for requirements and integration
• Collaborate with Platform/Infrastructure teams for deployment and operations
• Engage with the Cells Architecture team for multi-tenant routing and isolation
• Coordinate with the Runner team for CI/CD authentication infrastructure

Salary & Hiring Guidelines

The base salary range for this role varies by location. California/Colorado/Hawaii/New Jersey/New York/Washington, DC/Illinois/Minnesota pay ranges: $131,600 - $282,000 USD. Salary and grade level are determined through interviews and alignment with market data. All roles are remote where allowed.

Equal Opportunity Statement: GitLab is proud to be an equal opportunity workplace. Our policies and practices are based on merit and do not discriminate on protected characteristics. If you require accommodations during the interview process, please let us know.

Apply for this job

Please submit your application with the required fields. We welcome applicants from diverse backgrounds and encourage you to apply even if you do not meet every listed qualification.