Senior Backend Engineer, SSCS: Supply Chain

ABOUT THE ROLE As a Senior Backend Engineer at GitLab, you will play a key role in building the core capabilities of our dedicated software supply chain security Add-On. This commercial offering helps organizations control what software enters their builds, verify the integrity of what they ship, and identify malicious packages before they reach production. You will work across a set of connected backend systems that support package policy enforcement, artifact signing and verification, provenance attestation, and malicious package intelligence. WHAT YOU'LL DO You will be responsible for designing and implementing backend features across the Add-On's software supply chain security surface, including policy enforcement, artifact signing and verification, provenance attestation APIs, and malicious package detection integrations. This will involve building and improving the package policy evaluation engine, developing artifact signing and verification workflows, creating and evolving configuration interfaces, integrating Add-On capabilities with GitLab's existing security policy framework, and collaborating with adjacent teams. You will also be responsible for writing and maintaining comprehensive RSpec and integration test coverage, reviewing merge requests with a security-first mindset, and implementing solutions with substantial decision-making scope. WHAT YOU'LL NEED To be successful in this role, you will need to have proven backend engineering experience, including production Ruby on Rails expertise. You should also have working knowledge of Go or a clear willingness and ability to ramp up quickly in it. Solid API design skills, including experience with REST, GraphQL, and defining clear internal service boundaries, are also essential. Additionally, you should have solid PostgreSQL fundamentals, including schema design, query optimization, and indexing strategies, as well as experience with Redis for caching and distributed coordination patterns. A security-aware engineering mindset, with sound judgment around trust boundaries, input validation, and failure modes, is also required. WHY REMOTE GitLab is an all-remote, asynchronous organization that values flexibility and collaboration. As a Senior Backend Engineer, you will work closely with a Staff Backend Engineer on architecture and partner with other engineers to deliver secure, reliable features for enterprise customers with complex supply chain security needs. BENEFITS GitLab offers a competitive salary, comprehensive benefits package, and opportunities for career growth and professional development.