Intermediate Backend Engineer

Role Overview

We are looking for a Software Engineer on the Authorization team at GitLab. You will help build and maintain the system that controls access for every user, token, and automated agent across GitLab.com, Self-Managed, and Dedicated.

• Tech Stack: Primarily Ruby on Rails (400+ policy classes), with contributions moving toward a new stack pairing the monolith with a Rust policy engine. Experience in GraphQL or REST APIs is essential.

Key Responsibilities

• Implement authorization changes to ensure intended access and deny unauthorized requests effectively.
• Deliver well-scoped workstreams from feature-flagged rollouts through verification of system consistency.
• Build fine-grained permissions for tokens, roles, and additional resources within the established catalog (approx. 1,900 permissions).
• Extend authorization enforcement to ensure GraphQL and REST APIs consistently apply intended rules.
• Refactor long-lived policy code incrementally without disrupting existing customer behavior.
• Investigate and fix reliability, performance, and security issues in permission checks.