Staff Backend Engineer, SSCS: Supply Chain

3 hours, 55 minutes ago
Full-time
Lead
Software Development
GitLab

GitLab

GitLab: The comprehensive DevOps platform revolutionizing software development with automation, AI workflows, and essential tools for efficient collaboration.

Internet Software & Services
1K-5K
Founded 2014

Description

  • Define and drive the backend architecture for the SSCS Add-On, including package policy enforcement, provenance generation, artifact signing, and malicious package detection.
  • Lead design and implementation of SLSA Level 2 and Level 3 capabilities within GitLab CI/CD.
  • Architect integrations with Sigstore services such as Cosign, Fulcio, and Rekor for signing, verification, and trust-boundary workflows.
  • Design backend services and request paths that support allow, deny, and quarantine package policies with high performance and reliability.
  • Review merge requests with attention to security, architectural consistency, maintainability, and test quality.
  • Mentor backend engineers across experience levels through design guidance, feedback, and hiring participation.
  • Partner with Product, Infrastructure, Authentication, Authorization, and Security teams on cross-functional technical decisions.
  • Contribute to open source and industry working groups related to software supply chain security where appropriate.

Requirements

  • Strong experience building backend applications with Ruby on Rails in a high-scale production environment.
  • Professional experience with Go for backend or infrastructure-oriented services.
  • Experience leading architecture across multiple systems and influencing technical direction through strong engineering judgment.
  • Experience writing technical proposals, RFCs, and decision records in an async, documentation-first environment.
  • Solid security mindset and comfort working on products where trust, risk reduction, and secure defaults are central.
  • Familiarity with software supply chain security concepts such as build provenance, artifact signing, dependency security, or software bill of materials.
  • Strong teamwork and communication skills across distributed teams and functions.
  • Interest in GitLab's values and in building secure, scalable product capabilities.
  • Experience working in a remote, asynchronous environment is preferred.
  • Many successful candidates may not meet every single qualification, and applicants with varying levels of experience are encouraged to apply.

Benefits

  • Flexible Paid Time Off.
  • Equity compensation and an Employee Stock Purchase Plan.
  • Growth and Development Fund.
  • Parental leave.
  • Home office support.
  • Benefits to support health, finances, and well-being.
  • Team Member Resource Groups.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Python Developer (Bangalore, India Based)

Zimperium 251-1K Professional Services

Zimperium is hiring a Senior Python Developer in Bangalore to build and support scalable web and task-server infrastructure for its mobile security platform.

Agile AWS Azure CI/CD Django Docker FastAPI Flask GCP Generative AI Git Hugging Face Kubernetes LLM Microservices MLOps MongoDB MySQL PostgreSQL Python PyTorch REST API Scrum TensorFlow
3 hours, 10 minutes ago

[Job - 28321] Sênior Developer Golang, Brazil

CI&T 5K-10K Internet Software & Services

CI&T is hiring a Senior Golang Developer in Brazil to build and maintain scalable cloud applications for client projects, with a strong focus on technical ownership, collaboration, and continuous delivery.

Agile AWS CI/CD DDD Docker EC2 Git GitHub GitHub Actions Go Kafka Kubernetes Microservices OWASP REST API Solid.js Spring Boot SQL Terraform
3 hours, 10 minutes ago

Senior Software Engineer - Runtime

Sysdig 251-1K IT Services

Senior Software Engineer at Sysdig, working remotely on backend runtime security services that scale cloud threat detection, policy enforcement, and alerting across multi-cloud environments.

AWS C++ Docker Elasticsearch GCP GitHub Go Java Jenkins Kafka Kubernetes Linux Microservices NATS PostgreSQL Python Redis SQL
3 hours, 10 minutes ago

Senior Software Engineer - Runtime

Sysdig 251-1K IT Services

Sysdig is hiring a Senior Software Engineer to help scale its cloud security runtime platform by building backend services that power threat detection, policy enforcement, and alerting in multi-cloud environments.

AWS C++ Docker Elasticsearch GCP GitHub Go Java Jenkins Kafka Kubernetes Linux NATS PostgreSQL Python Redis SQL System Design
3 hours, 10 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers