Senior Backend Engineer, Verify: Pipeline Security

The GitLab DevSecOps platform empowers 100,000+ organizations to deliver software faster and more efficiently. We are one of the world’s largest all-remote companies with 2,000+ team members and values that foster a culture where people embrace the belief that everyone can contribute. Learn more about Life at GitLab.

An overview of this role

As our new Senior Backend Engineer, you will help us maintain and enhance features in the areas of Secrets Management and Build Artifacts, and research support for new offerings and architectures. You’ll be able to contribute towards increasing the maturity of our features for build artifacts and secrets management.

About the team

The Pipeline Security group is involved with diverse projects and tasks that include visibility into pipeline health, controlling the behavior of jobs and pipelines, and managing sensitive pipeline information for GitLab CI. Pipeline Security engineering regularly interfaces with broader development teams in supporting initiatives to ensure software supply chain security.

As part of the Verify stage, you will work with us to develop a best-in-class CI platform, developing new features, improving system performance, or resolving bugs and technical debt. Thanks to our Transparency value, you can see what we are working on on our Team page. You can even see our one-year vision and listen to some of our meetings.

Some examples of our work:

• Category Direction - Build Artifacts
• Category Direction - Secrets Management
• Pipeline Security 16.9 Kickoff video
• Baseline experience for storing and accessing reusable variables from UX

What you’ll do

• Develop features and improvements to GitLab CI in a secure, well-tested, and performant way.
• Work closely with other Engineers and stakeholders on systems design of our features, following our architectural design workflow process.
• Collaborate with Product Management and other stakeholders within Engineering (Frontend, Product Design, etc.) to maintain a high bar for quality in a fast-paced, iterative environment.
• Advocate for improvements to product quality, security, and performance.
• Craft code that meets our internal standards for style, maintainability, and best practices for a high-scale web environment. Maintain and advocate for these standards through code review.
• Recognize impediments to our efficiency as a team (“technical debt”), propose and implement solutions.
• Ship small features and improvements with minimal guidance and support from other team members. Collaborate with the team on larger projects.
• Work with your Engineering Manager and Product Manager to assess technical feasibility and discuss how to iterate on complex problems. This might involve working on proof-of-concept proposals to help guide technical discussions.
• Take ownership of what we build, focusing on stability and availability.

What you’ll bring

• Professional experience with Ruby on Rails.
• Experience working as a Tech Lead.
• Familiarity with designing secure backend solutions using encryption to manage secrets and tokens. (Experience with integrating or using solutions like HashiCorp Vault is a bonus).
• Experience working with a platform or complex application (Large scale is a bonus).
• Familiarity building and deploying software with CI/CD or other internal tooling.
• Familiarity with distributed, scalable and reliable systems.
• A user of modern DevOps platforms. (GitLab is a bonus.)
• Proficiency in the English language, both written and verbal, sufficient for success in a remote and largely asynchronous work environment.
• Experience working in a highly agile, iterative software development process.
• Self-motivated and self-managing, with excellent organizational skills.
• Demonstrated ability to work closely with other parts of the organization.
• Share our values, and work in accordance with those values.

How GitLab will support you

• Benefits to support your health, finances, and well-being
• All remote, asynchronous work environment
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and development budget
• Parental leave
• Home office support

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.

Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.

Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.