Remote Senior Backend Engineer – Authentication & Security

GitLab; United States; On-site; USD 139,000 - 235,000; Full time

Benefits offered by this job

Flexible PTO

Equity compensation

Growth & Development Fund

Parental Leave

Job summary

GitLab is seeking a Senior Backend Engineer for the Authentication team to build and secure authentication services across Rails and GATE. You will expand token issuance/validation, migrate paths from the monolith, and implement new auth mechanisms while addressing vulnerabilities and ensuring high-scale reliability.

Join us to influence GitLab's identity platform across multi-tenant SaaS, Self-Managed, and air-gapped environments, while collaborating with a remote, asynchronous team and growing

Qualifications

• Professional experience with Go and/or Ruby in SaaS environments.
• Familiarity with authentication/authorization tech such as OAuth, OIDC, SAML, SSO, SCIM, LDAP, JWT, RBAC or IAM.
• Knowledge of token systems, cryptographic signing, and key management.
• Experience bringing a service from concept to production in an agile environment.
• Strong written and verbal English for remote collaboration.

Responsibilities

• Contribute to roadmap and shape GitLab's authentication services including GATE.
• Design and implement authentication features across Rails monolith and GATE.
• Migrate auth paths from monolith to GATE while preserving reliability.
• Develop authentication mechanisms like Workload Identity Federation.
• Address security vulnerabilities via HackerOne program and improve security posture.
• Tackle cross-language challenges in Go and Ruby at scale.
• Uphold internal standards for style, maintainability, and best practices.

Skills

Go/Ruby

OAuth/OIDC/SAML

JWT

RBAC/IAM

Security concepts

English communication

Performance tuning

Tools

Rails monolith

GATE (identity service)

Job description

GitLab is seeking a Senior Backend Engineer for the Authentication team to build and secure authentication services across Rails and GATE. You will expand token issuance/validation, migrate paths from the monolith, and implement new auth mechanisms while addressing vulnerabilities and ensuring high-scale reliability.

Join us to influence GitLab's identity platform across multi-tenant SaaS, Self-Managed, and air-gapped environments, while collaborating with a remote, asynchronous team and growing