כניסההרשמה
חזרה

Senior Software Engineer (Ruby), Security Platform: Authorization

GitLab
139.2–235.2 אלף $ לשנהRemote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States, מרחוקסניורמשרה מלאה
משרה חיצונית, ההגשה באתר החברהאושר שהמשרה פתוחה לפני 17 שעות

You will build and improve GitLab’s authorization systems, including fine-grained permissions for users, tokens, and automated agents. You will work across the Ruby on Rails monolith and a newer authorization platform, with a focus on security, performance, and maintaining existing behavior.

מה תעשו

  • Design and ship authorization changes in GitLab’s Ruby on Rails monolith.
  • Own workstreams from problem definition through rollout, verification, and cleanup.
  • Build and extend fine-grained permissions for tokens and roles.
  • Extend and harden authorization enforcement across GraphQL and the REST API.
  • Refactor policy code so the monolith and the new authorization engine can evaluate it without changing behavior for existing customers.
  • Improve the reliability, performance, and security of authorization systems.

דרישות

  • Significant experience building and operating production Ruby on Rails applications.
  • Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions.
  • Working knowledge of GraphQL and API authorization patterns.
  • Comfort making careful changes to large, long-lived codebases, including incremental refactors and feature-flagged rollouts.
  • Strong written communication skills.

יתרון

  • Hands-on PostgreSQL experience.
  • Rust, gRPC or Protocol Buffers, Cedar or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture.
  • Transferable experience in identity, policy engines, or platform security.

הטבות

  • Benefits to support health, finances, and well-being
  • Flexible Paid Time Off
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental Leave
  • Team Member Resource Groups
Ruby on RailsAuthorizationRole-Based Access ControlGraphQLREST APIPostgreSQLRustgRPC