Senior Backend Engineer, SSCS: Pipeline Security

An overview of this role

As a Senior Backend Engineer on the Pipeline Security team, you'll take technical ownership of GitLab's native Secrets Manager, a production system built on OpenBao that helps secure sensitive credentials across GitLab CI/CD pipelines. You'll work at the intersection of backend engineering and infrastructure, shaping architecture in Ruby on Rails and Go, guiding decisions around role-based access control (RBAC), GraphQL APIs, and Kubernetes deployment configuration. In your first year, you'll help move Secrets Manager toward general availability, establish technical patterns the team can build on, and represent the team's point of view in cross-functional discussions. You'll have end-to-end ownership, from design through production operations, with room to identify what should be built next and improve how the team delivers secure, reliable features.

What you'll do

• Build and maintain secure, readable backend code primarily in Ruby on Rails, with some development in Go for targeted components.
• Design backend architecture for complex security features, including secrets access control, pipeline security enforcement, and OpenBao integration.
• Lead the development of role-based access control models, GraphQL APIs, and supporting application patterns for features owned by the team.
• Own features end to end, from technical design and implementation through deployment, validation, and production support.
• Collaborate with Product, security partners, and other engineering teams to document tradeoffs, align on direction, and deliver iteratively in a distributed environment.
• Improve code quality, maintainability, security, and performance through code review, design iteration, and internal standards for a high-scale web environment.
• Build and maintain Helm charts, including configuration, tuning, documentation, and automated testing for Kubernetes-based deployments.
• gorustkubernetesaibackenddataproductdesign