Senior Software Engineer, Security Platform: Authorization

GitLab

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
CanadaIsraelUnited Kingdom
Salary
$139,200–$235,200 / yr
Posted
38 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $188k
This role $187k
$128k $247k
below market most similar roles pay here above market

This role pays more than 50% of similar roles. Most pay $156,433–$219,150 — the blue band above. At the midpoint, this role pays about $187k versus about $188k for comparable roles.

Based on 240 similar postings.

Employer

About GitLab

GitLab is an all-remote software company that develops an AI-powered DevSecOps platform combining source code management, CI/CD, security scanning, and project planning in a single application.

GitLab currently has 53 open roles on FindRole.

Listed pay typically runs $152,800–$235,600 across 47 roles with salary data.

Most-posted roles

View all roles at GitLab

At a glance

TL;DR · Senior Software Engineer, Security Platform: Authorization

As a Senior Software Engineer (Ruby), Security Platform: Authorization, you will join the Authorization team to manage systems determining access for users, tokens, and automated agents. You will own workstreams from problem definition to feature-flagged rollout, specifically focusing on the permission model for GitLab.com and Self-Managed instances. Your daily tasks include designing and shipping authorization changes, refactoring long-lived policy code, and extending fine-grained permissions for tokens and roles. You will utilize Ruby on Rails, GraphQL, and REST APIs while contributing to a next-generation stack involving Rust, gRPC, Protocol Buffers, and Cedar policies. You must address technical challenges such as migrating to a Zanzibar-style relationship tuple engine, managing a large YAML permission catalog, and ensuring high performance during hundreds of permission checks per request.

What does a Software Engineer earn in Remote?

Median $208800 from 350 postings across 49 companies.

See salary data

What you'll do

  • Design and ship authorization changes in the Ruby on Rails monolith.
  • Own workstreams from problem definition through feature-flagged rollout and cleanup.
  • Build and extend fine-grained permissions for tokens and roles.
  • Extend and harden authorization enforcement across GraphQL and REST APIs.
  • Refactor policy code to be compatible with both the monolith and the new authorization engine.
  • Improve the reliability, performance, and security posture of existing authorization systems.
  • Partner with internal teams to define interface contracts for the shared authorization service.
  • Drive technical decisions by writing design docs and architecture decision records.

What we're looking for

  • Significant experience building and operating production Ruby on Rails applications.
  • Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions.
  • A security mindset to treat permission bugs as security bugs and reason about blast radius.
  • Comfort making careful changes to large, long-lived codebases using incremental refactors and feature-flagged rollouts.
  • Working knowledge of GraphQL and API authorization patterns.
  • Attention to performance at scale for systems running hundreds of checks per request.
  • Strong written communication skills for asynchronous documentation and code reviews.
  • Hands-on PostgreSQL experience (preferred).

More like this

Similar roles

Senior Software Engineer, Authentication

GitLab

Remote (Canada) 100 days ago $139,200–$235,200
Go Ruby Rails OAuth OpenID Connect OIDC SAML SCIM LDAP JWT IAM RBAC SSO Passkeys Workload Identity Federation
Remote

Senior Software Engineer, Identity Security

Salesforce

San Francisco, CA +3 2 days ago $172,500–$260,100
AWS Kubernetes Python Go Distributed Systems APIs Service Architecture Identity and Access Management Security Fundamentals Secure Software Development Monitoring Alerting SLOs
5+ yrs exp Hybrid

Senior Security Platform Engineer

Equinox

New York, NY 2 days ago $145,000–$175,000
Terraform Elastic Security AWS GCP Azure Python Node.js Java Spring Boot React Native React Web Flask CI/CD IAM SIEM WAF DNS CDN SAML MFA SAST SCA CSPM Wiz GitHub Advanced Security Okta Entra ID ECS
5+ yrs exp Hybrid

Senior Cloud Platform Security Engineer

CoStar Group

Arlington, VA +1 103 days ago $115,000–$203,000
AWS GCP Azure Kubernetes EKS Terraform CloudFormation Python Ansible PowerShell CI/CD Infrastructure as Code Wiz Datadog Prisma Cloud Snyk OPA/Gatekeeper Falco IAM Software Supply Chain Security SBOM Zero Trust
6+ yrs exp Hybrid