Intermediate Backend Engineer, Govern: Pipeline Security

GitLab is an open core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating the rate of human progress. This mission is integral to our culture, influencing how we hire, build products, and lead our industry. We make this possible at GitLab by running our operations on our product and staying aligned with our values. Learn more about Life at GitLab.

An overview of this role

As our new Backend Engineer, you will help us maintain, enhance, and create new features in the areas of Secrets Management and Secure Artifacts, and research support for new offerings and architectures.

About the team

The Pipeline Security group is involved with diverse projects and tasks that include integrating CI pipelines with secret managers, securing build artifacts, and accessing the GitLab API from a CI job. Pipeline Security engineering regularly interfaces with broader development teams in supporting initiatives to ensure software supply chain security.

As part of the Govern stage, you will work with us to provide the capabilities necessary to meet security and compliance requirements for organizations at any scale. Thanks to our Transparency value, you can see what we are working on on our Team page. You can even see our one-year vision and listen to some of our meetings.

Some examples of our work: 

• Category Direction - Secrets Management
• Category Direction - Secure Artifacts

What you’ll do  

• Develop features and improvements to GitLab in a secure, well-tested, and performant way.
• Work closely with other Engineers and stakeholders on systems design of our features, following our architectural design workflow process.
• Collaborate with Product Management and other stakeholders within Engineering (Frontend, Product Design, etc.) to maintain a high bar for quality in a fast-paced, iterative environment.
• Advocate for improvements to product quality, security, and performance.
• Craft code that meets our internal standards for style, maintainability, and best practices for a high-scale web environment. Maintain and advocate for these standards through code review.
• Recognize impediments to our efficiency as a team (“technical debt”), propose and implement solutions.
• Ship small features and improvements with minimal guidance and …