Senior Software Engineer (Ruby), Security Platform: Authorization

📋 Description

• Design and ship authorization changes in GitLab's Ruby on Rails monolith, where a single request
• Own a workstream end to end. Problem definition through feature-flagged rollout, dual-run
• Build and extend fine-grained permissions for tokens and roles, and keep the permission catalog
• Extend and harden authorization enforcement across GraphQL and the REST API.
• Refactor long-lived policy code so both the monolith and our new authorization engine can evaluate
• Improve the reliability, performance, and security posture of existing authorization systems

🎯 Requirements

• Significant experience building and operating production Ruby on Rails applications.
• Experience designing or implementing authorization systems, including role-based access control and
• A security mindset. You treat a permission bug as a security bug, and you reason about blast radius
• Comfort making careful changes to large, long-lived codebases. Incremental refactors
• Working knowledge of GraphQL and API authorization patterns.
• Attention to performance at scale. You understand why one uncached check matters when it runs

🎁 Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave