Staff Software Engineer, Security Platform: Authentication
GitLab Inc. (company site, opens in a new tab)BengaluruOn-siteDirect career pageEst. 40–70 LPA
Posted 2d ago
Reach people at GitLab Inc.
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at GitLab Inc. you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own the technical direction and lead complex migrations of authentication protocols including OAuth 2.0, OIDC, SAML, and token exchange across multiple GitLab platforms (GitLab.com, Self-Managed, Dedicated).
- Drive design documents and incremental shipping work, ensuring feature-flagged rollouts and backward-compatible changes in a multi-tenant SaaS environment.
- Mentor engineers, collaborate cross-functionally on interface contracts, and lead security-focused operational support and incident response related to authentication.
Minimum Requirements
- Significant hands-on experience building and operating production authentication or identity systems at scale with technical leadership capabilities.
- Deep knowledge of OAuth 2.0 and OIDC including PKCE, refresh token rotation, token exchange, client registration, scopes, and JWT with key rotation.
- Production experience in Ruby on Rails and Go, with skills in refactors, feature flagging, and backward-compatible migrations in large codebases.
- Working knowledge of SAML 2.0 and enterprise identity protocols like LDAP or SCIM.
Ideal Candidate Profile
- Experienced in handling and architecting authentication systems in SaaS with multi-tenant and high availability concerns.
- Comfortable leading technical direction while being hands-on in both Ruby on Rails and Go codebases for critical security services.
- Proficient in asynchronous, written communication across global teams, with a strong security mindset focused on real-world threats and risk mitigation.