Requirements

• Significant experience building and operating production Ruby on Rails applications.
• Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions.
• A security mindset.
• Comfort making careful changes to large, long-lived codebases.
• Working knowledge of GraphQL and API authorization patterns.
• Attention to performance at scale.
• Strong written communication.
• Transferable experience from adjacent domains such as identity, policy engines, and platform security.

What You'll Be Doing

• Design and ship authorization changes in GitLab's Ruby on Rails monolith.
• Own a workstream end to end.
• Build and extend fine-grained permissions for tokens and roles.
• Extend and harden authorization enforcement across GraphQL and the REST API.
• Refactor long-lived policy code.
• Improve the reliability, performance, and security posture of existing authorization systems.
• Partner with other teams on interface contracts.
• Drive technical decisions in writing.

Perks and Benefits

• Benefits to support your health, finances, and well-being.
• Flexible Paid Time Off.
• Team Member Resource Groups.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental Leave.