Senior Backend Engineer, SSCS: Supply Chain

3 hours, 55 minutes ago
Full-time
Senior
Software Development
GitLab

GitLab

GitLab: The comprehensive DevOps platform revolutionizing software development with automation, AI workflows, and essential tools for efficient collaboration.

Internet Software & Services
1K-5K
Founded 2014

Description

  • Design and implement backend features for the software supply chain security Add-On, including policy enforcement, artifact signing and verification, provenance attestation, and malicious package detection integrations.
  • Build and improve the package policy evaluation engine, including rule compilation, request matching, enforcement decisions, and performance-sensitive execution paths.
  • Develop artifact signing and verification workflows using Sigstore and Cosign, including signing key lifecycle management, keyless signing with OpenID Connect (OIDC), and policy-based promotion gates.
  • Create and evolve backend APIs and GraphQL interfaces for enterprise security teams configuring supply chain security requirements.
  • Integrate Add-On capabilities with GitLab’s security policy framework, including policy inheritance and policy-as-code support through YAML.
  • Collaborate with adjacent teams on malicious package intelligence integration and related product workflows.
  • Write and maintain comprehensive RSpec and integration tests, and help improve test reliability across the team.
  • Review merge requests with a security-first mindset and make substantial engineering decisions in partnership with the Staff Backend Engineer.

Requirements

  • Proven backend engineering experience with production Ruby on Rails expertise.
  • Working knowledge of Go, or a clear willingness and ability to ramp up quickly in it.
  • Solid API design experience, including REST, GraphQL, and internal service boundaries.
  • Strong PostgreSQL fundamentals, including schema design, query optimization, and indexing strategies.
  • Experience with Redis for caching and distributed coordination patterns.
  • A security-aware engineering mindset with sound judgment around trust boundaries, input validation, and failure modes.
  • Familiarity with software supply chain security concepts such as SLSA, SBOM, artifact signing, or related security scanning approaches.
  • Interest in complex policy, registry, or platform problems such as rules engines, package ecosystems, cryptographic signing, or DevSecOps product development.
  • Experience in all-remote, asynchronous collaboration environments is a strong fit for this role.

Benefits

  • Flexible Paid Time Off.
  • Equity Compensation and an Employee Stock Purchase Plan.
  • Benefits to support health, finances, and well-being.
  • Team Member Resource Groups.
  • Growth and Development Fund.
  • Parental leave.
  • Home office support.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Python Developer (Bangalore, India Based)

Zimperium 251-1K Professional Services

Zimperium is hiring a Senior Python Developer in Bangalore to build and support scalable web and task-server infrastructure for its mobile security platform.

Agile AWS Azure CI/CD Django Docker FastAPI Flask GCP Generative AI Git Hugging Face Kubernetes LLM Microservices MLOps MongoDB MySQL PostgreSQL Python PyTorch REST API Scrum TensorFlow
3 hours, 10 minutes ago

[Job - 28321] Sênior Developer Golang, Brazil

CI&T 5K-10K Internet Software & Services

CI&T is hiring a Senior Golang Developer in Brazil to build and maintain scalable cloud applications for client projects, with a strong focus on technical ownership, collaboration, and continuous delivery.

Agile AWS CI/CD DDD Docker EC2 Git GitHub GitHub Actions Go Kafka Kubernetes Microservices OWASP REST API Solid.js Spring Boot SQL Terraform
3 hours, 10 minutes ago

Senior Software Engineer - Runtime

Sysdig 251-1K IT Services

Senior Software Engineer at Sysdig, working remotely on backend runtime security services that scale cloud threat detection, policy enforcement, and alerting across multi-cloud environments.

AWS C++ Docker Elasticsearch GCP GitHub Go Java Jenkins Kafka Kubernetes Linux Microservices NATS PostgreSQL Python Redis SQL
3 hours, 10 minutes ago

Senior Software Engineer - Runtime

Sysdig 251-1K IT Services

Sysdig is hiring a Senior Software Engineer to help scale its cloud security runtime platform by building backend services that power threat detection, policy enforcement, and alerting in multi-cloud environments.

AWS C++ Docker Elasticsearch GCP GitHub Go Java Jenkins Kafka Kubernetes Linux NATS PostgreSQL Python Redis SQL System Design
3 hours, 10 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers