Senior Backend Engineer, SSCS: Supply Chain

About the role

GitLab seeks a Senior Backend Engineer to build the core capabilities of its Software Supply Chain Security Add‑On. The role focuses on backend services for package policy enforcement, artifact signing, provenance attestation, and malicious package detection. Responsibilities include designing APIs, improving the policy evaluation engine, integrating Sigstore/Cosign workflows, and extending GraphQL interfaces. The engineer will collaborate with a Staff Backend Engineer and cross‑functional teams to deliver secure, reliable features for enterprise customers. Candidates should have strong Ruby on Rails experience, knowledge of Go, API design, PostgreSQL, Redis, and a security‑aware mindset. Familiarity with SLSA, SBOM, and supply‑chain security concepts is a plus.

What you’ll do

• Design backend features
• Build policy engine
• Integrate signing workflows
• Extend GraphQL APIs
• Collaborate with teams
• Write tests
• Review code

What you’ll bring

• Ruby on Rails
• Go
• REST & GraphQL
• PostgreSQL
• Redis

Nice to have

• API design
• Security best practices
• Policy engine development

Skills

Benefits

• Health & wellness benefits
• Paid time off
• Equity compensation
• Growth & development fund
• Home office support