Engineering Manager, Software Supply Chain Security: Authorization

2 Months ago • All levels • Software Development & Engineering • $131,600 PA - $282,000 PA

Job Summary

Job Description

As an Engineering Manager for the Authorization team at GitLab, you'll lead a group of engineers working on authorization systems. You will be at the forefront of implementing Fine-Grained Access Control and developing a new policy-as-code approach. You will also focus on nurturing your team's health, hiring talent, and defining the roadmap for authorization features. The role involves staying updated with industry standards, collaborating with the security team, and representing GitLab in industry forums. This is a critical infrastructure role for GitLab, which requires leading a team focused on developing features for Software Supply Chain Security, with a primary focus on authorization systems and user permission models.
Must have:
  • Experience with authorization systems and access control models.
  • Understanding of policy-as-code approaches.
Good to have:
  • Familiarity with identity federation concepts and tools.
  • Experience implementing SLSA compliance in production environments.
Perks:
  • Benefits to support your health, finances, and well-being
  • All remote, asynchronous work environment
  • Flexible Paid Time Off
  • Team Member Resource Groups
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental leave
  • Home office support

Job Details

GitLab is an open core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating the rate of human progress. This mission is integral to our culture, influencing how we hire, build products, and lead our industry. We make this possible at GitLab by running our operations on our product and staying aligned with our values. Learn more about Life at GitLab.

Thanks to products like Duo Enterprise, and Duo Workflow, customers get the benefit of AI at every stage of the SDLC. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier. All team members are encouraged and expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact across our global organisation.

An overview of this role

As an Engineering Manager for the Authorization team at GitLab, you'll lead a talented group of engineers who are fundamentally transforming how permissions work across our platform. You'll be at the forefront of our major authorization systems redesign initiative, guiding your team through exciting challenges like implementing Fine-Grained Access Control and developing our new policy-as-code approach. 

At GitLab, we see our team as our product. While you'll need to be technically credible in authorization frameworks and identity management, your primary focus will be on nurturing your team's health, hiring exceptional talent, and positioning them for success. You'll collaborate closely with Product Managers to shape the roadmap for modern authorization features that balance security, usability, and performance at scale. This is a unique opportunity to lead critical infrastructure work that touches every part of the GitLab platform while helping transform our permission systems to be more secure, scalable, and flexible.

Your leadership will be instrumental as we transition from our current Declarative Policies framework to a more sophisticated policy-based system that supports advanced multi-tenancy features and reinforces GitLab's security posture. If you're passionate about building teams and systems that enable secure collaboration at scale, this role offers the chance to make a significant impact on GitLab's future.

This role is an extension of the Engineering Manager position.

What You’ll Do 

  • Lead a team focused on developing features for Software Supply Chain Security, with a primary focus on authorization systems and user permission models
  • Guide the implementation of advanced authorization controls across GitLab's platform
  • Collaborate with Product Managers to define and prioritize the roadmap for Supply Chain Security and authorization features in particular
  • Stay current with industry standards and best practices in identity and access management, particularly least-privilege and zero-trust access models
  • Partner with Security team members to ensure features meet the highest security standards
  • Educate and advocate for supply chain security best practices across GitLab
  • Represent GitLab in industry forums related to software supply chain security when appropriate

What You’ll Bring 

  • Experience with authorization systems, identity management, and access control models
  • Understanding of policy-as-code approaches (ideally familiarity with Cedar, Rego, or similar policy languages)
  • Knowledge of modern authorization frameworks like RBAC, ABAC, FGAC and context-aware authorization systems
  • Familiarity with identity federation concepts and tools
  • Strong technical leadership abilities to guide the team through complex architectural transitions
  • Experience implementing SLSA compliance in production environments is ideal, but not required

Performance Indicators

In addition to the standard Engineering Manager performance indicators, this role will also be measured on:

  • Successful implementation of components for the GitLab authorization components and IAM
  • Adoption rate of new authorization features by GitLab users
  • Reduction in security vulnerabilities related to authorization sub-systems
  • Integration completeness with other GitLab security features
  • Community engagement around GitLab's supply chain security capabilities
  • Documentation quality for supply chain security features

About the team

The Authorization team is responsible for building and maintaining GitLab's permission systems to be more secure, scalable, and flexible. We're currently embarking on a major authorization systems redesign initiative that will fundamentally transform how authorization works across GitLab. The team is focused on key projects including Fine-Grained Access Control, Policy Standardization, and developing a new policy-as-code approach that will replace our current Declarative Policies framework. This work is critical to GitLab's security posture, performance at scale, and ability to support advanced multi-tenancy features.

You can learn more about our team here

How GitLab will support you

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.

The base salary range for this role’s listed level is currently for residents of listed locations only. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, and alignment with market data. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.

California/Colorado/Hawaii/New Jersey/New York/Washington/DC/Illinois/Minnesota pay range

$131,600 - $282,000 USD

Similar Jobs

Thales - IVV - Test Leader

Thales

Vélizy-Villacoublay, Île-de-France, France (On-Site)
2 Months ago
Coherent corp. - Manufacturing Operator D Team

Coherent corp.

Starkville, Mississippi, United States (On-Site)
3 Months ago
Epic Games - Senior Mobile Platform Engineer

Epic Games

(On-Site)
7 Months ago
Shipt - Operations Manager - TLMD Direct

Shipt

Minneapolis, Minnesota, United States (Hybrid)
1 Year ago
Gigamon - Engineering Program Manager II

Gigamon

Chennai, Tamil Nadu, India (On-Site)
5 Months ago
Sword Health - Algorithms Engineer Trainee

Sword Health

Porto, Porto District, Portugal (Hybrid)
1 Month ago
Nagarro - Staff Engineer, ETL

Nagarro

California, United States (On-Site)
9 Months ago
Samsung Semiconductor - Senior Engineer, Modeling (Optical Proximity Correction) Software engineer

Samsung Semiconductor

San Jose, California, United States (On-Site)
2 Months ago
Spatial - Principal Engineer - Design Software

Spatial

Scottsdale, Arizona, United States (On-Site)
5 Months ago
attentive - Staff Software Engineer, Personalization Engine

attentive

United States (Remote)
2 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Runway - Applied Research Lead, Model Scaling

Runway

(Remote)
1 Month ago
Apple - System Product Design Engineering Program Manager Lead/Manager

Apple

Sunnyvale, California, United States (On-Site)
1 Month ago
Ziff Davis - Marketing Events Director

Ziff Davis

United States (Remote)
2 Months ago
Ubisoft - Lead Level & Quest Designer

Ubisoft

Saint-Mandé, Île-de-France, France (Hybrid)
6 Months ago
Universal Music Group - Manager, Graphic Design

Universal Music Group

Santa Monica, California, United States (On-Site)
1 Month ago
Garena - Senior Marketing Specialist

Garena

Ho Chi Minh City, Ho Chi Minh City, Vietnam (On-Site)
4 Months ago
WebTech Corporation - Manufacturing Assembly / Soldering Technician

WebTech Corporation

Tamil Nadu, India (On-Site)
1 Month ago
Apple - US-Operations Lead

Apple

Boise, Idaho, United States (On-Site)
1 Month ago
HP - Supply Chain Intern

HP

Barueri, São Paulo, Brazil (On-Site)
8 Months ago
Parsh Technologies LLP - Unreal Engine Game Developer

Parsh Technologies LLP

Rajkot, Gujarat, India (Remote)
2 Years ago

Get notifed when new similar jobs are uploaded

Jobs in Worldwide

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

Software Development & Engineering Jobs

Corsair gaming - Software Engineer, Stream Deck

Corsair gaming

Munich, Bavaria, Germany (On-Site)
1 Month ago
Mixpanel - Senior Software Engineer, Session Replay

Mixpanel

San Francisco, California, United States (Remote)
1 Month ago
Nice - Manager Engineering

Nice

Sandy, Utah, United States (On-Site)
1 Month ago
Ambient.ai - Senior Sales Engineer - SLED

Ambient.ai

Redwood City, California, United States (On-Site)
1 Month ago
Brillio - ETL Lead Engineer

Brillio

Plainsboro Township, New Jersey, United States (Hybrid)
1 Month ago
ness digital  - Senior Support Engineer

ness digital

United States (Hybrid)
1 Month ago
Supabase - Developer Relations Engineer

Supabase

United States (Remote)
1 Month ago
zoox - Senior/Staff Software Engineer - Simulation Traffic & Behavior Modeling

zoox

Foster City, California, United States (Hybrid)
9 Months ago
Gigamon - Sr. Staff HW Engineer

Gigamon

Chennai, Tamil Nadu, India (On-Site)
2 Months ago
Marvell - Principal Engineer, Emulation

Marvell

Bengaluru, Karnataka, India (On-Site)
1 Year ago

Get notifed when new similar jobs are uploaded