Senior Backend Engineer, SSCS: Supply Chain at GitLab (India)

GitLab

3 months ago

Senior Backend Engineer, SSCS: Supply Chain

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Join GitLab as a Senior Backend Engineer on the SSCS Add-On team to build core backend capabilities for supply chain security, including policy enforcement, artifact signing, provenance attestation, and malicious package detection. You’ll work on API design, performance, security, and integration with Sigstore/Cosign, contributing to an enterprise-ready solution in a fully remote, asynchronous environment.

Location: India

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Design and implement backend features across the Add-On's software supply chain security surface, including policy enforcement, artifact signing and verification, provenance attestation APIs, and malicious package detection integrations
•Build and improve the package policy evaluation engine, including rule compilation, request matching, enforcement decisions, and performance-sensitive execution paths
•Develop artifact signing and verification workflows, including Sigstore and Cosign integrations, key management, and OpenID Connect (OIDC) based signing
•Create and evolve configuration interfaces and the GraphQL surface for expressing supply chain security requirements
•Collaborate with adjacent teams to incorporate malicious package intelligence and broaden security workflows

Key Requirements

•Proven backend engineering experience with Ruby on Rails as the primary language
•Working knowledge of Go or ability to ramp up quickly in it
•Strong API design skills with REST and GraphQL
•Solid PostgreSQL fundamentals including schema design, query optimization, and indexing
•Experience with Redis for caching and distributed coordination

Experience:DevSecOpsSoftware supply chain security

Skills:CollaborationOwnershipProblem-solvingCommunicationTeamwork

Languages:English

Tech Stack:Ruby on RailsGoRESTGraphQLPostgreSQLRedisSigstoreCosignOIDCYAML

Company Brief

GitLab

Provides a single application for the complete DevSecOps lifecycle, offering source code management, CI/CD, security, and collaboration tools to help teams deliver software faster and more securely.

Industry: Developer Tools

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2011

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

GitLab

3 months ago

Senior Backend Engineer, SSCS: Supply Chain

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Location: India

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Design and implement backend features across the Add-On's software supply chain security surface, including policy enforcement, artifact signing and verification, provenance attestation APIs, and malicious package detection integrations
•Build and improve the package policy evaluation engine, including rule compilation, request matching, enforcement decisions, and performance-sensitive execution paths
•Develop artifact signing and verification workflows, including Sigstore and Cosign integrations, key management, and OpenID Connect (OIDC) based signing
•Create and evolve configuration interfaces and the GraphQL surface for expressing supply chain security requirements
•Collaborate with adjacent teams to incorporate malicious package intelligence and broaden security workflows

Key Requirements

•Proven backend engineering experience with Ruby on Rails as the primary language
•Working knowledge of Go or ability to ramp up quickly in it
•Strong API design skills with REST and GraphQL
•Solid PostgreSQL fundamentals including schema design, query optimization, and indexing
•Experience with Redis for caching and distributed coordination

Experience:DevSecOpsSoftware supply chain security

Skills:CollaborationOwnershipProblem-solvingCommunicationTeamwork

Languages:English

Tech Stack:Ruby on RailsGoRESTGraphQLPostgreSQLRedisSigstoreCosignOIDCYAML

Company Brief

GitLab

Provides a single application for the complete DevSecOps lifecycle, offering source code management, CI/CD, security, and collaboration tools to help teams deliver software faster and more securely.

Industry: Developer Tools

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2011

Website LinkedIn