Senior Software Engineer (Ruby), Security Platform: Authorization

TalentHop; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

TalentHop is partnering to recruit a Senior Software Engineer (Ruby) focused on security platform authorization. This fully remote US role centers on building and maintaining fine-grained permission models across a Rails monolith, GraphQL, and REST endpoints.

You will own workstreams, refine policy code, and collaborate with auth, platform, AI, and service teams to improve reliability and security at scale.

Qualifications

• Extensive experience with production Ruby on Rails applications.
• Knowledge of authorization systems, including role-based access control and fine-grained permissions.
• Strong security mindset with attention to permission-related risks.
• Experience with large, long-standing codebases and incremental changes.
• Familiarity with GraphQL and API authorization patterns.
• Awareness of performance considerations at scale.
• Strong written communication for asynchronous decision-making.
• Beneficial experience: Rust, gRPC, Protocol Buffers, Cedar, Zanzibar-style authorization, Go, or SOA.

Responsibilities

• Design and implement authorization changes within a Ruby on Rails monolith handling complex permission checks.
• Own workstreams from problem definition through feature rollout and verification.
• Develop and maintain fine-grained permission catalogs and token roles.
• Extend authorization enforcement across GraphQL and REST API endpoints.
• Refactor policy code to support evaluation by both the monolith and a new authorization engine without altering current behavior.
• Enhance reliability, performance, and security of existing authorization systems.
• Collaborate with authentication, platform, AI, and modular-service teams on authorization interfaces.
• Document and communicate technical decisions through written design documents and code reviews.

Skills

Ruby on Rails

Authorization systems

RBAC

GraphQL

API security

Performance at scale

Security mindset

Technical writing

Distributed systems

Tools

Rust

gRPC

Protocol Buffers

Cedar

Zanzibar-style authorization

Job description

This is a Fully Remote Job

1. About Our Client:

The organization operates in the software development and DevSecOps space, offering an intelligent orchestration platform designed to enhance developer productivity, operational efficiency, and security compliance. It supports over 50 million registered users and serves more than half of the Fortune 100 companies. The organization integrates AI into its workflows to drive innovation and impact and emphasizes a high-performance culture focused on continuous knowledge exchange and collaboration to address complex software development challenges.

2. About the Opportunity:

The Senior Software Engineer (Ruby), Security Platform: Authorization is responsible for developing and maintaining critical authorization systems that control access for users, tokens, and automated agents across the platform. This role focuses on designing and implementing fine-grained permission models and transitioning authorization logic to a next-generation stack. The position directly impacts the security and scalability of access control, ensuring robust and efficient permission enforcement.

3. Responsibilities:

• Design and implement authorization changes within a Ruby on Rails monolith handling complex permission checks.
• Own workstreams from problem definition through feature rollout and verification.
• Develop and maintain fine-grained permission catalogs and token roles.
• Extend authorization enforcement across GraphQL and REST API endpoints.
• Refactor policy code to support evaluation by both the monolith and a new authorization engine without altering current behavior.
• Enhance reliability, performance, and security of existing authorization systems.
• Collaborate with authentication, platform, AI, and modular-service teams on authorization interfaces.
• Document and communicate technical decisions through written design documents and code reviews.

4. Requirements:

• Extensive experience with production Ruby on Rails applications.
• Knowledge of authorization systems, including role-based access control and fine-grained permissions.
• Strong security mindset with attention to permission-related risks.
• Experience working with large, long-standing codebases and performing incremental, behavior-preserving changes.
• Familiarity with GraphQL and API authorization patterns.
• Awareness of performance considerations at scale.
• Strong written communication skills for asynchronous decision-making.
• Beneficial but not required: experience with Rust, gRPC, Protocol Buffers, policy languages like Cedar, Zanzibar-style authorization systems, Go, or service-oriented architectures.

5. Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Equal Opportunity Statement:

Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.