Intermediate Backend Engineer, Authorization

📋 Description

• Implement authorization changes in GitLab's Ruby on Rails monolith so permission checks allow
• Deliver well-scoped workstreams from feature-flagged rollout through verifying that the old and new
• Build and extend fine-grained permissions for tokens and roles so additional resources have
• Extend and fix authorization enforcement so GraphQL and the REST API enforce the intended
• Make incremental refactors to long-lived policy code without changing behavior for existing
• Investigate and fix reliability, performance, and security issues so affected permission checks

🎯 Requirements

• Solid experience building and maintaining production Ruby on Rails applications, typically gained
• Hands-on experience with authorization concepts, such as role-based access control or fine-grained
• A security mindset: you treat a permission bug as a security bug and consider who a change could
• Experience making careful changes to existing codebases, including incremental refactors and
• Familiarity with GraphQL or API authorization patterns.
• Awareness of performance, including how repeated permission checks can add up on every request.

🎁 Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave