A live role

Intermediate Backend Engineer, Authorization

from GitLab · read the original and apply on their site

Bangalore, India

Our take: The real work here is making careful, well-scoped changes to the authorization system that decides what every user and token can access across GitLab, where correctness is a security concern and most thinking happens in writing.

If you find satisfaction in getting authorization exactly right, where a single request fires hundreds of permission checks and a bug is a security bug, this is work built for careful minds. You will deliver well-scoped changes in a mature Ruby on Rails monolith, help move the permission model onto a new Rust policy engine (no prior Rust needed, you will learn it with the team), and work almost entirely in writing. It suits someone who likes deep focus, honest documents over meetings, and knowing their work quietly protects fifty million users.

Needs

  • ruby on rails
  • debugging and fixing
  • incremental refactoring
  • systems design
  • writing it down
  • security thinking

Rewards

  • deep focus work
  • remote autonomy
  • work-life balance
  • equity upside
  • huge user impact

Demands

  • careful correctness
  • clear written argument
  • async remote work
  • security consequences
  • cross-team coordination

Grows

  • learning rust
  • mentored ownership
  • performance awareness
  • long-lived codebases

Values

  • transparency
  • correctness over speed
  • inclusion
  • ethics first
  • learning culture

Drains

  • behavior-preserving refactors
  • old vs new verification
  • async decision loops

Would you love this work?

See how what you love doing lines up with this role - it takes about ten minutes to find out.

Find what I'd love to do next