# Senior Software Engineer (Ruby), Security Platform: Authorization

**Company**: GitLab
**Location**: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $139,200-$235,200 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/gitlab/jobs/8738225002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_37cf2075-473

## Description

GitLab is seeking a Senior Software Engineer to join its Authorization team, focusing on GitLab's Ruby on Rails monolith and next-generation authorization stack. The ideal candidate will design and ship authorization changes, own workstreams end-to-end, build and extend fine-grained permissions, and refactor long-lived policy code.

Responsibilities:

- Design and ship authorization changes in GitLab's Ruby on Rails monolith

- Own a workstream end to end, from problem definition through feature-flagged rollout, dual-run verification, and cleanup

- Build and extend fine-grained permissions for tokens and roles

- Extend and harden authorization enforcement across GraphQL and the REST API

- Refactor long-lived policy code for evaluation by both the monolith and new authorization engine

- Improve reliability, performance, and security posture of existing authorization systems

- Partner with teams on interface contracts as authorization moves toward a shared service

- Drive technical decisions through writing design docs, architecture decision records, and code reviews

Requirements:

- Significant experience building and operating production Ruby on Rails applications

- Experience designing or implementing authorization systems

- A security mindset with attention to permission bugs as security bugs

- Comfort making careful changes to large, long-lived codebases

- Working knowledge of GraphQL and API authorization patterns

- Attention to performance at scale

- Strong written communication skills

Nice to Have:

- Experience with Rust, gRPC, Protocol Buffers, Cedar, or other policy languages

- Knowledge of Zanzibar-style authorization systems, Go, or service-oriented architecture

The base salary range for this role is $139,200-$235,200 USD.

## Skills

### Required
- Ruby on Rails
- authorization systems
- GraphQL
- API authorization
- security

### Nice to have
- Rust
- gRPC
- Protocol Buffers
- Cedar
- Zanzibar-style authorization systems
- Go
- service-oriented architecture

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/gitlab/jobs/8738225002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)