Engineering Manager, Software Supply Chain Security: Auth Infrastructure

Engineering Manager, Software Supply Chain Security: Auth Infrastructure 3 days ago Be among the first 25 applicants GitLab is an open‑core software company that develops the most comprehensive AI‑powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co‑create the software that powers our world. When everyone can contribute, consumers become contributors, accelerating human progress. Our platform unites teams and organizations, breaking down barriers and redefining what’s possible in software development. Thanks to products like Duo Enterprise and Duo Agent Platform, customers get AI benefits at every stage of the SDLC. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, expecting all team members to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high‑performance culture is driven by our values and continuous knowledge exchange, enabling team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co‑create the future with us as we build technology that transforms how the world develops software. Overview As an Engineering Manager for the Auth Infrastructure team at GitLab, you’ll lead a distributed group of engineers building the core infrastructure that powers authentication and authorization across all GitLab deployment models. You’ll focus on secure, performant, and reliable identity services at global scale, enabling our move toward a zero‑trust architecture and a more modular, microservices‑based platform. While you’ll bring deep technical experience with distributed systems, proxy technologies, infrastructure security, and languages like Go or Rust, your primary impact will come from building and supporting a healthy team, hiring and developing great talent, and partnering closely with Authentication, Authorization, Platform, Infrastructure, Cells Architecture, and Runner teams to ensure the auth infrastructure layer meets their needs. In your first year, you’ll shape the foundation of GitLab’s Identity and Access Management services, from Envoy‑based proxy layers and token services to policy decision infrastructure that serves millions of requests per second across GitLab.com, self‑managed, Dedicated, and air‑gapped environments. Some Examples Of Our Projects Designing and operating an Envoy‑based proxy layer that handles millions of authentication requests per second with mTLS, short‑lived certificates, and service mesh patterns Delivering zero‑downtime migrations of authentication infrastructure and resilient token services that enable policy‑based authorization at scale What you’ll do Lead the Auth Infrastructure engineering team, setting clear direction, enabling strong execution, and supporting team health and growth Drive the design and implementation of GitLab’s authentication infrastructure, including Envoy proxy configuration, token services, and policy decision components Solve complex infrastructure challenges such as bi‑directional gRPC tunnels, mTLS implementation, short‑lived certificate management, and service mesh architecture Ensure the authentication infrastructure reliably supports all GitLab deployment models, including GitLab.com, self‑managed, Dedicated, and air‑gapped environments Lead performance optimization efforts for authentication and authorization at scale, focusing on low‑latency, high‑throughput decision making Develop and maintain robust monitoring, observability, and debugging capabilities for distributed authentication systems Collaborate closely with Authentication, Authorization, Platform, Infrastructure, Cells Architecture, and Runner teams to align infrastructure capabilities with their needs and ensure seamless integration Hire, mentor, and develop engineers, and build processes that support sustainable delivery and continuous improvement within the Auth Infrastructure team What you’ll bring Experience leading and developing infrastructure‑focused engineering teams, with a focus on distributed systems and reliability Proficiency with proxy and edge routing technologies such as Envoy, Traefik, HAProxy, or nginx, including design and configuration at scale Hands‑on background in Go and/or Rust for building and operating high‑performance backend or infrastructure services Familiarity with service mesh architectures, mTLS, and zero‑trust networking concepts, including short‑lived certificates and secure tunnels (e.g., gRPC) Understanding of token and identity systems such as JWT or Macaroons, including cryptographic signing, key management, and integration with authentication flows Experience with database and storage technologies such as RDS, Google Spanner, Postgres, or similar, and how they support authentication workloads Knowledge of Kubernetes, container orchestration, and cloud‑native deployment patterns, including observability, debugging, and performance optimization for distributed systems Experience with infrastructure automation, CI/CD, and GitOps practices, and an interest in applying transferable skills from related domains or backgrounds to authentication infrastructure work About The Team The Auth Infrastructure team at GitLab is one of three authentication‑focused teams within GitLab’s Software Supply Chain Security stage, and we are responsible for the infrastructure foundation that powers authentication and authorization across all GitLab deployment models. Our team is composed of distributed systems and infrastructure engineers working asynchronously across regions, collaborating closely with the Authentication and Authorization teams for product requirements and integration, the Platform and Infrastructure teams for deployment and operations, the Cells Architecture team for multi‑tenant routing and isolation, and the Runner team for CI/CD authentication needs. We focus on solving complex challenges such as building and operating a proxy layer that can handle millions of requests per second, enabling zero‑downtime migrations of authentication infrastructure, designing resilient token and identity services, and establishing the core building blocks for policy‑based authorization at global scale. Salary United States Salary Range: $131,600 — $282,000 USD (this range applies to residents of the United States only). Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100 % of the offered base salary. How GitLab Will Support You Benefits to support your health, finances, and well‑being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental leave Home office support Equal Opportunity and EEO Statement GitLab is proud to be an equal‑opportunity workplace and is an affirmative action employer. Policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (including disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process. Referrals increase your chances of interviewing at GitLab by 2x. Job Details Seniority level: Mid‑Senior level Employment type: Full‑time Job function: Engineering and Information Technology Industries: IT Services and IT Consulting and Software Development #J-18808-Ljbffr