About the company
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100 trust GitLab to ship better, more secure software faster.
Responsibilities
- Contribute to the team's overall direction and play a direct part in shaping the future roadmap of GATE and GitLab's authentication services.
- Design and implement authentication features across the Rails monolith and GATE, including token issuance, validation, and identity services.
- Help migrate authentication and token management paths from the monolith into GATE while maintaining reliability across all deployment models.
- Build authentication mechanisms from the ground up, such as Workload Identity Federation.
- Bolster the security posture of our users and organizations through robust access management and by addressing vulnerabilities reported through our HackerOne program.
- Solve technical problems of high scope and complexity across Go and Ruby codebases.
- Help define and improve internal standards for style, maintainability, and best practices in a high-scale environment.
Requirements
- Professional experience with Go and/or Ruby in scaling or mission-critical software-as-a-service products.
- Familiarity with authentication and authorization technologies or techniques such as OAuth, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), single sign-on (SSO), System for Cross-domain Identity Management (SCIM), Lightweight Directory Access Protocol (LDAP), JSON Web Token (JWT), role-based access control (RBAC), or identity and access management (IAM).
- Knowledge of token systems, cryptographic signing, and key management.
- Experience building or contributing to a service from concept to production.
- Proficiency in written and verbal English.
- Experience with performance and optimization problems.
- Experience working in a highly agile, iterative software development process.