Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff Software Engineer

Home > Ruby programming jobs

Staff Software Engineer in Others new

  • Bengaluru, India

Responsibilities

  • Own the technical direction for OAuth 2.0, OIDC, SAML, token exchange, and authentication protocols across GitLab platforms.
  • Write architecture documents and ADRs for multi-quarter initiatives and break them into feature-flagged increments.
  • Lead safe migrations involving token formats, client and grant state, and session behavior across GitLab.com, Self-Managed, and Dedicated.
  • Implement complex authentication functionality in Ruby on Rails and Go and review other engineers’ designs and merge requests.
  • Coordinate interface contracts with GATE Core, GATE Infra, Authorization, and Tenant Scale teams.
  • Threat-model new authentication flows, add rate limits and abuse controls, and lead technical responses to authentication incidents.
  • Mentor senior and intermediate engineers and improve the team’s protocol and security expertise.
  • Collaborate asynchronously across India, Europe, and the Americas and participate in on-call or operational support as required.

Requirements

  • Significant experience building and running production authentication or identity systems at scale with cross-team technical leadership.
  • Deep hands-on knowledge of OAuth 2.0 and OIDC, including PKCE, refresh token rotation, token exchange, client registration, scopes, JWTs, signing keys, and key rotation.
  • Working knowledge of SAML 2.0 single sign-on and enterprise identity integration such as LDAP or SCIM.
  • Strong production experience in Ruby on Rails or Go, with willingness to work in both languages.
  • Experience with careful refactoring, feature-flagged rollouts, and backward-compatible migrations in large, long-lived codebases.
  • Experience with multi-tenant SaaS systems, data isolation, and performance under high request volume.
  • Security-focused understanding of token theft, replay, revocation, and blast radius.
  • Clear written English and comfort working in an all-remote, asynchronous company.
  • Optional qualifications include experience with Doorkeeper, Devise, OmniAuth, passkeys, multi-factor authentication, workload identity, gateways, policy engines, AI agent authentication, multi-region architectures, or open-source identity projects.

Benefits

  • All roles are remote, with possible location-based eligibility requirements.
  • Benefits supporting health, finances, and well-being.
  • Flexible paid time off.
  • Team Member Resource Groups.
  • Equity compensation and Employee Stock Purchase Plan.
  • Growth and Development Fund.
  • Parental leave.

GitLab

GitLab is a comprehensive AI-powered DevSecOps platform. It helps companies manage the growing complexities of developing, securing, and deploying software. Its platform is used to deliver software faster and more efficiently while strengthening security, end-to-end compliance, and auditability. ...

Similar positions

Senior Application Security Engineer

  • Pennylane SAS
  • Full time
  • Remote
  • 11/11/2026
  • Salary: Competitive
  • Europe, UK

Engineering Intern - General / AI

  • Allium
  • Full time
  • Remote
  • 11/10/2026
  • Salary: Competitive
  • Singapore, USA

Lead Engineer - Making Payments

  • Xero
  • Full time
  • Australia
  • 11/10/2026
  • Sydney

Senior Elixir Engineer

  • Driftrock
  • Full time
  • Remote
  • 11/10/2026
  • Salary: $80k-$106k
  • United Kingdom

Software Engineer, Financial Data & Payments

  • Gusto
  • Full time
  • USA
  • 11/10/2026
  • Salary: $183k - $245k/yr
  • Remote