Intermediate Backend Engineer, Govern: Pipeline Security

Remote

GitLab is an open core software company that develops the most comprehensive AI-powered DevSecOps Platform (https://about.gitlab.com/solutions/devops-platform) , used by more than 100,000 organizations. Our mission (https://about.gitlab.com/company/mission) is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating the rate of human progress. This mission is integral to our culture, influencing how we hire, build products, and lead our industry. We make this possible at GitLab by running our operations (https://about.gitlab.com/handbook/using-gitlab-at-gitlab) on our product and staying aligned with our values (https://about.gitlab.com/handbook/values) . Learn more about Life at GitLab (https://vimeo.com/gitlab/gettoknowgitlab) .

An overview of this role

As our new Backend Engineer, you will help us maintain, enhance, and create new features in the areas of Secrets Management (https://about.gitlab.com/direction/govern/pipeline_security/secure_artifacts/) and Secure Artifacts (https://about.gitlab.com/direction/govern/pipeline_security/secure_artifacts/) , and research support for new offerings and architectures.

About the team

The Pipeline Security group (https://handbook.gitlab.com/handbook/engineering/development/ops/verify/pipeline-security/) is involved with diverse projects and tasks that include integrating CI pipelines with secret managers, securing build artifacts, and accessing the GitLab API from a CI job. Pipeline Security engineering regularly interfaces with broader development teams in supporting initiatives to ensure software supply chain security.

As part of the Govern stage (https://about.gitlab.com/direction/govern/) , you will work with us to provide the capabilities necessary to meet security and compliance requirements for organizations at any scale. Thanks to our Transparency (https://about.gitlab.com/handbook/values/#transparency) value, you can see what we are working on on our Team (https://handbook.gitlab.com/handbook/engineering/development/sec/govern/pipeline-security/) page. You can even see our one-year vision (https://about.gitlab.com/direction/govern/#1-year-plan) and listen (https://www.youtube.com/playlist?list=PL05JrBw4t0Kq53VUOvTk3VdXN79PA0SXT) to some of our meetings.

Some examples of our work:

• Category Direction - Secrets Management (https://about.gitlab.com/direction/govern/pipeline_security/secrets_management/)

• Category Direction - Secure Artifacts (https://about.gitlab.com/direction/govern/pipeline_security/secure_artifacts/)

What you’ll do

• Develop features and improvements to GitLab in a secure, well-tested, and performant way.

• Work closely with other Engineers and stakeholders on systems design of our features, following our architectural design workflow process (https://handbook.gitlab.com/handbook/engineering/architecture/workflow/) .

• Collaborate with Product Management and other stakeholders within Engineering (Frontend, Product Design, etc.) to maintain a high bar for quality in a fast-paced, iterative environment.

• Advocate for improvements to product quality, security, and performance.

• Craft code that meets our internal standards for style, maintainability, and best practices for a high-scale web environment. Maintain and advocate for these standards through code review.

• Recognize impediments to our efficiency as a team (“technical debt”), propose and implement solutions.

• Ship small features and improvements with minimal guidance and support from other team members. Collaborate with the team on larger projects.

• Work with your Engineering Manager and Product Manager to assess technical feasibility and discuss how to iterate on complex problems. This might involve working on proof-of-concept proposals to help guide technical discussions.

• Take ownership (https://about.gitlab.com/handbook/engineering/development/ops/verify/#mission) of what we build, focusing on stability and availability.

What you’ll bring

• Professional experience with Ruby on Rails.

• Familiarity with designing secure backend solutions using encryption to manage secrets and tokens. (Experience with integrating or using solutions like HashiCorp Vault is a bonus).

• Experience working with a platform or complex application (Large scale is a bonus).

• A user of modern DevOps platforms. (GitLab is a bonus.)

• Proficiency in the English language, both written and verbal, sufficient for success in a remote and largely asynchronous work environment.

• Experience working in a highly agile, iterative software development process.

• Self-motivated and self-managing, with excellent organizational skills.

• Demonstrated ability to work closely with other parts of the organization.

• Share our values, and work in accordance with those values.

How GitLab will support you

• Benefits to support your health, finances, and well-being (https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/)

• All remote (https://about.gitlab.com/company/culture/all-remote/guide/) , asynchronous (https://about.gitlab.com/company/culture/all-remote/asynchronous/) work environment

• Flexible Paid Time Off (https://about.gitlab.com/handbook/paid-time-off/)

• Team Member Resource Groups

• Equity Compensation & Employee Stock Purchase Plan (https://about.gitlab.com/handbook/stock-options/)

• Growth and development budget (https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/#growth-and-development-benefit)

• Parental leave (https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/#parental-leave)

• Home office (https://about.gitlab.com/handbook/finance/procurement/office-equipment-supplies/) support

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups (https://about.gitlab.com/company/culture/inclusion/#examples-of-select-underrepresented-groups) are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.

The base salary range for this role’s listed level is currently for residents of listed locations only. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, and alignment with market data. See more information on our benefits (https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/)_ _and equity (https://about.gitlab.com/handbook/stock-options/)_ _. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.

California/Colorado/Hawaii/New Jersey/New York/Washington/DC pay range

$98,000-$210,000USD

Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.

Privacy Policy: Please review our Recruitment Privacy Policy. (https://about.gitlab.com/handbook/hiring/candidate/faq/recruitment-privacy-policy/) Your privacy is important to us.

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy (https://about.gitlab.com/handbook/people-policies/inc-usa/#equal-employment-opportunity-policy) and EEO is the Law (https://about.gitlab.com/handbook/labor-and-employment-notices/#eeoc-us-equal-employment-opportunity-commission-notices) . If you have a disability or special need that requires accommodation (https://about.gitlab.com/handbook/people-policies/inc-usa/#reasonable-accommodation) , please let us know during the recruiting process (https://about.gitlab.com/handbook/hiring/interviewing/#adjustments-to-our-interview-process) .