Senior Software Engineer, RoR/Go

This is a fully remote position, open to applicants in Canada.

📋 Description

• Play a key role in guiding the team's strategic direction and actively influence the future development of GATE and GitLab's authentication services.

• Create and implement authentication functionalities within the Rails monolith and GATE, encompassing token issuance, validation, and identity services.

• Assist in transitioning authentication and token management processes from the monolith to GATE while ensuring reliability across all deployment models.

• Develop authentication mechanisms from scratch, including Workload Identity Federation.

• Enhance the security posture of our users and organizations through effective access management and by addressing vulnerabilities reported via our HackerOne program.

• Tackle complex technical challenges across Go and Ruby codebases.

• Contribute to defining and refining internal standards for coding style, maintainability, and best practices in a high-scale environment, while promoting these standards through code reviews.

• Represent GitLab and its values publicly regarding broader initiatives, specific projects, and contributions from individuals not employed by GitLab Inc.

• Deliver moderately sized features and enhancements with some guidance and support from fellow team members.

• Collaborate with the team on larger projects, including the development of GATE.

• Advance GitLab engineering projects through the maintainer trainee program at your own pace, with the aim of becoming a project maintainer.

⛳️ Requirements

• Professional experience with Go and/or Ruby in scaling or mission-critical software-as-a-service products.

• Knowledge of authentication and authorization technologies or techniques such as OAuth, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), single sign-on (SSO), System for Cross-domain Identity Management (SCIM), Lightweight Directory Access Protocol (LDAP), JSON Web Token (JWT), role-based access control (RBAC), or identity and access management (IAM).

• Understanding of token systems, cryptographic signing, and key management.

• Experience in building or contributing to a service from inception to production, including proposal, discussion, and execution.

• Proficient in written and verbal English, capable of clearly communicating complex issues and solutions within a remote, largely asynchronous work setting.

• Familiarity with performance and optimization challenges, along with a proven ability to diagnose and avert these issues.

• Experience in a highly agile, iterative software development process, with effective work management skills, organization, and the ability to prioritize tasks.

🏝️ Benefits

• Benefits designed to support your health, finances, and overall well-being

• Flexible Paid Time Off

• Team Member Resource Groups

• Equity Compensation & Employee Stock Purchase Plan

• Growth and Development Fund

• Parental Leave