Staff Software Engineer, Security Platform: Authentication

📋 Description

• Own the technical direction for authentication protocols at GitLab, including OAuth 2.0, OIDC
• Write and drive design documents and architecture decision records (ADRs) for multi-quarter work
• Lead migrations that must not break existing customers: token formats, client and grant state, and
• Be hands-on in the most complex parts of the code, in Ruby on Rails and Go, and review the designs
• Agree interface contracts with the GATE Core, GATE Infra, Authorization, and Tenant Scale (Cells
• Treat authentication as a security and availability boundary: threat-model new flows, add rate

🎯 Requirements

• Significant experience building and running production authentication or identity systems at scale
• Deep, hands-on knowledge of OAuth 2.0 and OIDC: authorization code with Proof Key for Code Exchange
• Working knowledge of SAML 2.0 single sign-on and enterprise identity integration (LDAP, System for
• Strong production experience in Ruby on Rails or Go, willingness to work in both, and experience
• A security mindset. You think about token theft, replay, revocation, and blast radius before you
• Experience with multi-tenant software as a service (SaaS) systems, including data isolation and

🎁 Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave