Senior Backend Engineer, Golang, Software Supply Chain Security

This is a fully remote position, open to applicants in North America.

📋 Description

• Design and develop the essential components of GitLab's authentication infrastructure layer, which includes the configuration of Envoy proxy, token services, and policy decision systems.

• Create solutions for critical infrastructure issues such as bi-directional gRPC tunnels, mutual Transport Layer Security (mTLS), and service mesh architecture.

• Construct and manage authentication infrastructure that caters to GitLab.com, self-managed, Dedicated, and air-gapped deployment models.

• Enhance the performance and reliability of authentication and authorization decisions at scale across distributed systems.

• Implement and improve monitoring, observability, and debugging features for authentication services to ensure secure and stable operations.

• Work closely with the Authentication, Authorization, Platform, and Infrastructure teams to align infrastructure capabilities with product and architectural needs.

• Contribute to the technical direction and roadmap of the team for secure, scalable authentication, including standards for style, maintainability, and best practices.

• Represent GitLab and its core values by engaging in public communications, broader initiatives, and contributing to relevant open source projects.

⛳️ Requirements

• Extensive experience in building high-performance backend services using Go, preferably in large-scale, distributed environments.

• Practical experience with proxy and edge technologies such as Envoy, Traefik, HAProxy, or nginx, including their configuration and operation in production settings.

• Hands-on experience with service mesh architectures, mutual TLS (mTLS), zero-trust networking, and secure service-to-service communication patterns (gRPC, REST).

• Familiarity with database and storage technologies such as RDS, Google Spanner, Postgres or similar, including schema design and performance considerations.

• Knowledge of token systems (for example, JWT or Macaroons), cryptographic signing, and key management for authentication and authorization workflows.

• Experience with Kubernetes, container orchestration, and cloud-native deployment patterns, including observability, monitoring, and debugging of distributed systems.

• Ability to take ownership of projects from concept to production, including proposing designs, facilitating discussions, and delivering results in a highly agile, iterative environment.

• Proficient written and verbal communication skills in English, with a collaborative, solution-oriented approach and willingness to learn from and support team members with diverse backgrounds and transferable skills.

🏝️ Benefits

• Benefits to support your health, finances, and overall well-being

• Flexible Paid Time Off

• Team Member Resource Groups

• Equity Compensation & Employee Stock Purchase Plan

• Growth and Development Fund

• Parental leave

• Home office support