Intermediate Backend Engineer, Authorization
Core
Build and maintain the authorization system that decides access for users, tokens, and automated agents across GitLab's platform.
Role type
Intermediate Backend Engineer (Authorization)
Builds
Fine-grained token permissions, custom roles, and GraphQL/REST APIs enforcing access control.
Domain
SaaS platform security and identity management
Required skills
Ruby on Rails, authorization concepts (RBAC, fine-grained permissions), API security, incremental refactoring, feature-flagged rollouts, GraphQL, REST APIs
Preferred skills
PostgreSQL, Rust, gRPC, Protocol Buffers, Cedar, Zanzibar-style authorization, Go, service-oriented architecture
Responsibilities
Implement authorization changes in the Ruby on Rails monolith, extend fine-grained permissions for tokens and roles, fix authorization enforcement for GraphQL and REST APIs, refactor long-lived policy code, investigate and fix reliability/performance/security issues, document interface contracts with auth/AI teams
Seniority
Intermediate, hands-on IC
