GitLab4 дня назад
Senior Software Engineer (Ruby), Security Platform: Authorization
Зарплата не указана
РЫНОК
15 044 ₽медиана по профессии
Backend Developer · 82 вакансий с указанной зарплатой
5 092половина предложений: 11 885–20 1031,2 млн
Работодатель не указал зарплату — сравните с рынком сами.
Remote
Обязанности
- 01Design and ship authorization changes in GitLab's Ruby on Rails monolith
- 02Own a workstream end to end from problem definition through feature-flagged rollout, dual-run verification, and cleanup
- 03Build and extend fine-grained permissions for tokens and roles, and keep the permission catalog coherent as it grows
- 04Extend and harden authorization enforcement across GraphQL and the REST API
- 05Refactor long-lived policy code so both the monolith and the new authorization engine can evaluate it without changing behavior for existing customers
- 06Improve the reliability, performance, and security posture of existing authorization systems, including paying down permission-model debt
- 07Partner with the authentication, platform, AI, and modular-service teams on interface contracts as authorization moves toward a shared service
- 08Drive technical decisions in writing including design docs, architecture decision records, and code review
Требования
- 01Significant experience building and operating production Ruby on Rails applications
- 02Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions
- 03A security mindset with the ability to reason about blast radius before elegance
- 04Comfort making careful changes to large, long-lived codebases including incremental refactors, feature-flagged rollouts, and migrations that must not change behavior for existing users
- 05Working knowledge of GraphQL and API authorization patterns
- 06Attention to performance at scale
- 07Strong written communication skills and effectiveness when most decisions happen in a document or merge request rather than a meeting
Условия
- 01Fully asynchronous organization
- 02Distributed team across time zones
- 03Work in the open
- 04Decisions made in writing