GitLab4 дня назад

Senior Software Engineer (Ruby), Security Platform: Authorization

Зарплата не указана
РЫНОК
15 044медиана по профессии
Backend Developer · 82 вакансий с указанной зарплатой
5 092половина предложений: 11 885–20 1031,2 млн
Работодатель не указал зарплату — сравните с рынком сами.
Remote

Обязанности

  • 01Design and ship authorization changes in GitLab's Ruby on Rails monolith
  • 02Own a workstream end to end from problem definition through feature-flagged rollout, dual-run verification, and cleanup
  • 03Build and extend fine-grained permissions for tokens and roles, and keep the permission catalog coherent as it grows
  • 04Extend and harden authorization enforcement across GraphQL and the REST API
  • 05Refactor long-lived policy code so both the monolith and the new authorization engine can evaluate it without changing behavior for existing customers
  • 06Improve the reliability, performance, and security posture of existing authorization systems, including paying down permission-model debt
  • 07Partner with the authentication, platform, AI, and modular-service teams on interface contracts as authorization moves toward a shared service
  • 08Drive technical decisions in writing including design docs, architecture decision records, and code review

Требования

  • 01Significant experience building and operating production Ruby on Rails applications
  • 02Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions
  • 03A security mindset with the ability to reason about blast radius before elegance
  • 04Comfort making careful changes to large, long-lived codebases including incremental refactors, feature-flagged rollouts, and migrations that must not change behavior for existing users
  • 05Working knowledge of GraphQL and API authorization patterns
  • 06Attention to performance at scale
  • 07Strong written communication skills and effectiveness when most decisions happen in a document or merge request rather than a meeting

Условия

  • 01Fully asynchronous organization
  • 02Distributed team across time zones
  • 03Work in the open
  • 04Decisions made in writing