Salary not listed
Intermediate Backend Engineer, Authorization
BackendRemote — Bangalore, India
Published on 2026-11-03
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and maintain authorization features across GitLab’s Ruby on Rails application and its evolving policy engine. The role focuses on fine-grained permissions, reliable API enforcement, and carefully migrating authorization logic while preserving existing behavior.
About the company
GitLab is a DevSecOps platform that brings source control, CI/CD, security, and project management into a single application. It helps engineering teams plan, build, secure, and ship software faster.
The team
GitLab Authorization team
Stack
Ruby on RailsRustGraphQLRESTgRPCProtocol BuffersPostgreSQLCedar
What you'll do
- Implement and improve authorization checks in GitLab’s Rails monolith.
- Extend fine-grained permissions for tokens and roles.
- Ensure GraphQL and REST APIs consistently enforce permissions.
- Refactor policy code and support feature-flagged migrations to the new authorization stack.
- Investigate and fix authorization reliability, performance, and security issues.
- Document interface contracts and contribute to design documents, merge requests, and code reviews.
What we're looking for
- Typically 2–4 or more years of production Ruby on Rails experience.
- Hands-on experience with authorization concepts such as role-based access control or fine-grained permissions.
- Security-minded approach to permission changes and their potential impact.
- Experience making careful changes to existing codebases, including incremental refactors and feature-flagged rollouts.
- Familiarity with GraphQL or API authorization patterns.
- Awareness of performance considerations in repeated permission checks.
- Strong written communication and ability to work asynchronously.
Nice to have
- PostgreSQL experience.
- Rust, gRPC, Protocol Buffers, Cedar, or other policy-language experience.
- Zanzibar-style authorization systems, Go, or service-oriented architecture experience.
Benefits
- Flexible paid time off
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave
- Team member resource groups