Intermediate Backend Engineer, Authorization

About the role

We work in a fully asynchronous organization, with most decisions made in documents or merge requests rather than meetings. We expect all GitLab team members to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. Benefits to support your health, finances, and well-being

What you'll do

• Deliver well-scoped workstreams from feature-flagged rollout through verifying that the old and new systems produce the same results
• Build and extend fine-grained permissions for tokens and roles so additional resources have permission coverage consistent with the established catalog
• Extend and fix authorization enforcement so GraphQL and the REST API enforce the intended permissions consistently
• Make incremental refactors to long-lived policy code without changing behavior for existing customers
• Investigate and fix reliability, performance, and security issues so affected permission checks return the expected results without regressions

What you need

• 2–4 years in software engineering
• REST APIs
• GraphQL
• Ruby
• gRPC
• Rust
• Git
• Any graduate

Good to have

• PostgreSQL
• Go