Senior Fullstack Engineer (RoR/vue.js), Software Supply Chain Security: Authorization
GitLab
Senior Fullstack Engineer (RoR/vue.js), Software Supply Chain Security: Authorization
Job Description
About this Role
Join GitLab as a Senior Fullstack Engineer on the Authorization team, shaping the core access control systems that power a comprehensive AI-driven DevSecOps platform.
Empower millions of users by architecting next-generation authorization infrastructure with policy-as-code and fine-grained permissions.
Drive GitLab's evolution toward zero-trust architecture, ensuring secure, fast, and reliable access at massive scale.
Collaborate with elite Security, Database, and Platform teams to innovate across multi-tenant environments and deployment models.
Contribute to groundbreaking projects like fine-grained permissions for Job Tokens, Personal Access Tokens, and the GitLab Duo Agent Platform.
Thrive in a high-performance culture where AI amplifies productivity, innovation flourishes, and every voice drives impact.
Co-create the future of software development, accelerating human progress by enabling universal contribution to world-changing code.
Lead architectural decisions that balance immediate security needs with long-term scalability and developer delight.
Mentor peers in secure coding and authorization patterns within an asynchronous, all-remote powerhouse of talent.
Experience career acceleration at GitLab, solving complex challenges alongside industry leaders in a values-driven ecosystem.
Locations
- Canada, Remote, Netherlands, Remote, United Kingdom (Remote)
Salary
Salary details available upon request
95,000 - 155,000 USD / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- Ruby on Railsintermediate
- Vue.jsintermediate
- PostgreSQLintermediate
- Authorization models (RBAC, ABAC)intermediate
- Policy-as-code systemsintermediate
- Query optimizationintermediate
- Caching strategiesintermediate
- Distributed systemsintermediate
- Security principlesintermediate
- Frontend frameworksintermediate
Required Qualifications
- Professional experience building and maintaining production applications with Ruby on Rails (experience)
- Experience with Vue.js or similar modern frontend frameworks (experience)
- Strong understanding of authorization models including role-based and attribute-based access control (experience)
- Experience designing and optimizing high-scale backend systems (experience)
- PostgreSQL performance tuning, query optimization, and caching strategies (experience)
- Understanding of core security principles including threat modeling and least-privilege access (experience)
- Experience working with distributed systems and service-to-service communication (experience)
- Demonstrated ability to own complex technical initiatives from design through deployment (experience)
- Strong collaboration and communication skills in asynchronous environments (experience)
- Openness to learning and applying skills from adjacent domains or technologies (experience)
Preferred Qualifications
- Familiarity with policy-based authorization systems (experience)
- Knowledge of modern policy languages such as Cedar or Rego (experience)
- Experience with zero-trust architectures (experience)
- Background in cloud or multi-tenant environments (experience)
- Expertise in database decomposition strategies (experience)
- Experience with GitLab Duo or AI-powered DevSecOps platforms (experience)
- Technical leadership in authorization or security projects (experience)
- Mentoring experience with engineering teams (experience)
- Contributions to open-core or open-source projects (experience)
- Understanding of Auth stack evolution and identity management (experience)
Responsibilities
- Implement fine-grained permission systems for Job Tokens, Personal Access Tokens, and GitLab Duo Agent Platform
- Collaborate with Security, Authentication, Database, and Platform teams on authorization initiatives
- Solve complex performance challenges including query optimization and caching strategies
- Design authorization systems across multiple deployment models and multi-tenant architectures
- Drive improvements to authorization security, maintainability, and developer experience
- Contribute to architectural decisions with long-term strategic focus
- Mentor engineers in authorization patterns and secure coding practices
- Conduct code reviews and maintain comprehensive documentation
- Optimize PostgreSQL performance for authorization workloads
- Align designs with evolving Auth stack and zero-trust principles
Benefits
- general: Competitive base salary with equity compensation
- general: Employee Stock Purchase Plan
- general: Flexible Paid Time Off
- general: Comprehensive health, dental, and vision benefits
- general: Parental leave
- general: Home office support and equipment budget
- general: Growth and Development Fund for professional advancement
- general: Team Member Resource Groups for inclusion and belonging
- general: AI productivity tools and continuous learning opportunities
- general: All-remote work culture with global collaboration
Tags & Categories
Senior Fullstack Engineer (RoR/vue.js), Software Supply Chain Security: Authorization
GitLab
Senior Fullstack Engineer (RoR/vue.js), Software Supply Chain Security: Authorization
Job Description
About this Role
Join GitLab as a Senior Fullstack Engineer on the Authorization team, shaping the core access control systems that power a comprehensive AI-driven DevSecOps platform.
Empower millions of users by architecting next-generation authorization infrastructure with policy-as-code and fine-grained permissions.
Drive GitLab's evolution toward zero-trust architecture, ensuring secure, fast, and reliable access at massive scale.
Collaborate with elite Security, Database, and Platform teams to innovate across multi-tenant environments and deployment models.
Contribute to groundbreaking projects like fine-grained permissions for Job Tokens, Personal Access Tokens, and the GitLab Duo Agent Platform.
Thrive in a high-performance culture where AI amplifies productivity, innovation flourishes, and every voice drives impact.
Co-create the future of software development, accelerating human progress by enabling universal contribution to world-changing code.
Lead architectural decisions that balance immediate security needs with long-term scalability and developer delight.
Mentor peers in secure coding and authorization patterns within an asynchronous, all-remote powerhouse of talent.
Experience career acceleration at GitLab, solving complex challenges alongside industry leaders in a values-driven ecosystem.
Locations
- Canada, Remote, Netherlands, Remote, United Kingdom (Remote)
Salary
Salary details available upon request
95,000 - 155,000 USD / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- Ruby on Railsintermediate
- Vue.jsintermediate
- PostgreSQLintermediate
- Authorization models (RBAC, ABAC)intermediate
- Policy-as-code systemsintermediate
- Query optimizationintermediate
- Caching strategiesintermediate
- Distributed systemsintermediate
- Security principlesintermediate
- Frontend frameworksintermediate
Required Qualifications
- Professional experience building and maintaining production applications with Ruby on Rails (experience)
- Experience with Vue.js or similar modern frontend frameworks (experience)
- Strong understanding of authorization models including role-based and attribute-based access control (experience)
- Experience designing and optimizing high-scale backend systems (experience)
- PostgreSQL performance tuning, query optimization, and caching strategies (experience)
- Understanding of core security principles including threat modeling and least-privilege access (experience)
- Experience working with distributed systems and service-to-service communication (experience)
- Demonstrated ability to own complex technical initiatives from design through deployment (experience)
- Strong collaboration and communication skills in asynchronous environments (experience)
- Openness to learning and applying skills from adjacent domains or technologies (experience)
Preferred Qualifications
- Familiarity with policy-based authorization systems (experience)
- Knowledge of modern policy languages such as Cedar or Rego (experience)
- Experience with zero-trust architectures (experience)
- Background in cloud or multi-tenant environments (experience)
- Expertise in database decomposition strategies (experience)
- Experience with GitLab Duo or AI-powered DevSecOps platforms (experience)
- Technical leadership in authorization or security projects (experience)
- Mentoring experience with engineering teams (experience)
- Contributions to open-core or open-source projects (experience)
- Understanding of Auth stack evolution and identity management (experience)
Responsibilities
- Implement fine-grained permission systems for Job Tokens, Personal Access Tokens, and GitLab Duo Agent Platform
- Collaborate with Security, Authentication, Database, and Platform teams on authorization initiatives
- Solve complex performance challenges including query optimization and caching strategies
- Design authorization systems across multiple deployment models and multi-tenant architectures
- Drive improvements to authorization security, maintainability, and developer experience
- Contribute to architectural decisions with long-term strategic focus
- Mentor engineers in authorization patterns and secure coding practices
- Conduct code reviews and maintain comprehensive documentation
- Optimize PostgreSQL performance for authorization workloads
- Align designs with evolving Auth stack and zero-trust principles
Benefits
- general: Competitive base salary with equity compensation
- general: Employee Stock Purchase Plan
- general: Flexible Paid Time Off
- general: Comprehensive health, dental, and vision benefits
- general: Parental leave
- general: Home office support and equipment budget
- general: Growth and Development Fund for professional advancement
- general: Team Member Resource Groups for inclusion and belonging
- general: AI productivity tools and continuous learning opportunities
- general: All-remote work culture with global collaboration
Tags & Categories