Senior Ruby Engineer - Authorization & Security (Remote)

GitLab; United States; On-site; GBP 103,000 - 174,000; Full time

Benefits offered by this job

Growth and Development Fund

Equity Compensation & Employee Stock…

Parental Leave

Flexible Paid Time Off

Job summary

GitLab is seeking a Senior Software Engineer for its Authorization team. You will own substantial parts of the system that decide access for users, tokens, and automated agents across GitLab.com, Self-Managed, and Dedicated deployments.

The project moving from Rails monolith to a shared authorization platform combines Ruby and Rust components with a Zanzibar-style policy model. You will design and ship authorization changes in the Rails monolith, extend fine-grained token permissions, and ensure

Qualifications

• Significant experience building and operating production Ruby on Rails applications.
• Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions.
• Strong security mindset and attention to blast radius in permissions changes.

Responsibilities

• Design and ship authorization changes in GitLab's Ruby on Rails monolith with large-scale permission checks.
• Own a workstream end-to-end from definition to rollout and verification.
• Build and extend fine-grained permissions for tokens and roles across APIs.
• Extend and harden authorization enforcement across GraphQL and REST APIs.
• Refactor policy code to support a new authorization engine without breaking existing users.
• Improve reliability, performance, and security of authorization systems.

Skills

Rails

Authorization systems

RBAC

GraphQL API

PostgreSQL

Rust

GRPC

Policy languages

Tools

Rust

gRPC

Job description

GitLab is seeking a Senior Software Engineer for its Authorization team. You will own substantial parts of the system that decide access for users, tokens, and automated agents across GitLab.com, Self-Managed, and Dedicated deployments.

The project moving from Rails monolith to a shared authorization platform combines Ruby and Rust components with a Zanzibar-style policy model. You will design and ship authorization changes in the Rails monolith, extend fine-grained token permissions, and ensure