As a Software Engineer on GitLab's Authorization team, you'll help build and maintain the system that decides what every user, token, and automated agent can access on GitLab.com, Self-Managed, and Dedicated.
Implement authorization changes in GitLab's Ruby on Rails monolith so permission checks allow intended access and deny unauthorized access.
Deliver well-scoped workstreams from feature-flagged rollout through verifying that the old and new systems produce the same results…
Build and extend fine-grained permissions for tokens and roles so additional resources have permission coverage consistent with the established catalog.
Extend and fix authorization enforcement so GraphQL and the REST API enforce the intended permissions consistently.
Hands-on experience with authorization concepts, such as role-based access control or fine-grained permissions, from work or projects.
A security mindset: you treat a permission bug as a security bug and consider who a change could affect before choosing an implementation.
Experience making careful changes to existing codebases, including incremental refactors and feature-flagged rollouts that preserve existing behavior.
Familiarity with GraphQL or API authorization patterns.
Experience: Entry-level · 2–4 years
More open roles like this one
Bengaluru, KA, IndiaIndia & South Asia
Canberra, AUST CAPITAL TERR, AustraliaAsia-Pacific
Sydney, NSW, AustraliaAsia-Pacific
Intermediate Backend Engineer, Authorization · GitLab
Don't have an account? Already have an account?