Staff Backend Engineer, Software Supply Chain Security @GitLab

Overview

As a Staff Backend Engineer at GitLab, you will play a key role in shaping the Software Supply Chain Security offering. This position involves serving as a senior technical leader for backend systems that ensure the security of software built and delivered within the GitLab platform.

Key Responsibilities

• Define and drive the technical architecture for the SSCS Add-On, focusing on backend systems for package policy enforcement, provenance generation, artifact signing, and malicious package detection.
• Lead design and implementation for Supply-chain Levels for Software Artifacts (SLSA) Level 2 and Level 3 capabilities within GitLab CI/CD.
• Architect integrations with Sigstore services including signing workflows and verification.
• Design backend services that support package policies with high performance and reliability.
• Review merge requests for security, architectural consistency, maintainability, and test quality.
• Mentor Backend Engineers, providing guidance and support.
• Collaborate with teams on cross-team technical decisions.
• Contribute to open source and industry discussions related to software supply chain security.

Requirements

• Strong experience in building backend applications with Ruby on Rails in a high-scale production environment.
• Professional experience with Go for backend or infrastructure-oriented services.
• Track record of leading architecture across systems and influencing technical direction.
• Experience writing clear technical proposals and decision records in a documentation-first environment.
• Strong security mindset, comfortable working on trust and risk-sensitive products.
• Familiarity with software supply chain security concepts.
• Strong teamwork and communication skills.
• Interest in GitLab's values and a commitment to building secure products.

Benefits

• Benefits to support health, finances, and well-being.
• Flexible Paid Time Off.
• Team Member Resource Groups.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental Leave.

Location

Remote

How to Apply

Interested candidates should apply through GitLab's recruitment portal.