Senior Fullstack Engineer, GitLab
Ruby on Rails/Vue.js, Software Supply Chain Security: Authorization
$117.6-252k
+ Equity Compensation & Employee Stock Purchase Plan
One DevOps platform
Open for applications
One DevOps platform
1001+ employees
Open for applications
$117.6-252k
+ Equity Compensation & Employee Stock Purchase Plan
1001+ employees
Company mission
To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.
Role
Who you are
- Significant professional experience with Ruby on Rails and Vue.js in production environments
- Strong understanding of authorization concepts: RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), and fine-grained access control patterns
- Experience with high-scale backend systems that handle millions of requests per day
- Deep knowledge of database optimization, particularly PostgreSQL performance tuning and query optimization
- Familiarity with policy-based authorization systems or strong interest in learning Cedar, Rego, or similar policy languages
- Understanding of security principles including threat modeling, least-privilege access, and zero-trust architectures
- Experience with distributed systems, caching strategies, and service-to-service communication
- Proven ability to own complex technical initiatives from design through production deployment
- Strong collaboration skills for working across multiple engineering teams in an asynchronous, remote environment
- Comfort working in a highly agile, iterative development process with focus on shipping value incrementally
What the job involves
- As a Senior Full Stack Engineer on the Authorization team at GitLab, you'll build the critical systems that determine who can access what across the entire GitLab platform—impacting millions of users from startups to Fortune 500 enterprises. This role focuses on architecting and implementing GitLab's next-generation Authorization infrastructure, including policy-as-code systems, fine-grained permissions, and performance optimization at massive scale.
- Your contributions will directly enable GitLab's evolution toward zero-trust architecture while ensuring authorization decisions remain fast, secure, and correct
- This is a unique opportunity to solve authorization challenges at global scale while working with cutting-edge authorization frameworks and modern policy languages
- Implement fine-grained permission systems for Job Tokens, Personal Access Tokens, Duo agent platform and other authentication mechanisms
- Collaborate with Security, Database, and Platform teams on the new Auth stack initiative
- Solve complex performance challenges including authorization query optimization, caching strategies, and database decomposition
- Design authorization systems that work seamlessly across multiple deployment models and multi-tenant architectures
- Advocate for improvements to authorization security, maintainability, and developer experience through code review and technical leadership
- Contribute to architectural decisions for authorization features with a 12-month+ strategic view
- Mentor team members on authorization patterns, policy languages, and secure coding practices
- The Authorization team is responsible for building and maintaining GitLab's permission systems to be more secure, scalable, and flexible. We're currently executing a major authorization systems redesign that will fundamentally transform how authorization works across GitLab
- The team works closely with:
- Authentication & Product Security teams for integrated identity and access management
- Database team for query optimization and data model design
- Security team for threat modeling and security architecture reviews
Our take
GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.
According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.
GitLab was in the right place to capitalise on the recent trend toward rapid digital transformation and remote working. This trend is expected to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
15% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Sep 2019
$268m
SERIES E
Dec 2018
$20m
SERIES D
Total funding: $435m
Company benefits
- We offer benefits to manage your health, wealth, and well-being regardless of location
- Flexibility in schedule to be there for life’s important moments
- Equity compensation & Employee Stock Purchase Plan offered
- Generous Paid Time Off
Company HQ
Financial District, San Francisco, CA
Leadership
Sid Sijbrandij
(CEO)Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.
Share this job
View 62 more jobs at GitLab