{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/skill/openbao"},"x-facet":{"type":"skill","slug":"openbao","display":"Openbao","count":1},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_44ff0179-993"},"title":"Senior Backend Engineer (RoR), SSCS: Pipeline Security","description":"<p>As a Senior Backend Engineer on the Pipeline Security team, you&#39;ll take technical ownership of GitLab&#39;s native Secrets Manager, a production system built on OpenBao that helps secure sensitive credentials across GitLab CI/CD pipelines.</p>\n<p>You&#39;ll work at the intersection of backend engineering and infrastructure, shaping architecture in Ruby on Rails and Go, guiding decisions around role-based access control (RBAC), GraphQL APIs, and Kubernetes deployment configuration.</p>\n<p>In your first year, you&#39;ll help move Secrets Manager toward general availability, establish technical patterns the team can build on, and represent the team&#39;s point of view in cross-functional discussions.</p>\n<p>You&#39;ll have end-to-end ownership, from design through production operations, with room to identify what should be built next and improve how the team delivers secure, reliable features.</p>\n<p><strong>Responsibilities</strong></p>\n<ul>\n<li>Build and maintain secure, readable backend code primarily in Ruby on Rails, with some development in Go for targeted components.</li>\n</ul>\n<ul>\n<li>Design backend architecture for complex security features, including secrets access control, pipeline security enforcement, and OpenBao integration.</li>\n</ul>\n<ul>\n<li>Lead the development of role-based access control models, GraphQL APIs, and supporting application patterns for features owned by the team.</li>\n</ul>\n<ul>\n<li>Own features end to end, from technical design and implementation through deployment, validation, and production support.</li>\n</ul>\n<ul>\n<li>Collaborate with Product, security partners, and other engineering teams to document tradeoffs, align on direction, and deliver iteratively in a distributed environment.</li>\n</ul>\n<ul>\n<li>Improve code quality, maintainability, security, and performance through code review, design iteration, and internal standards for a high-scale web environment.</li>\n</ul>\n<ul>\n<li>Build and maintain Helm charts, including configuration, tuning, documentation, and automated testing for Kubernetes-based deployments.</li>\n</ul>\n<ul>\n<li>Validate features in Kubernetes environments, including GitLab Cloud Native and Cloud Native Hybrid deployments, using GitLab testing and performance testing frameworks.</li>\n</ul>\n<p><strong>Requirements</strong></p>\n<ul>\n<li>Experience building and maintaining backend features with a focus on secure design, data handling, and production reliability.</li>\n</ul>\n<ul>\n<li>Ability to write production-quality code in Ruby on Rails, including use of framework security patterns and review for common application risks.</li>\n</ul>\n<ul>\n<li>Working knowledge of CI/CD concepts and the ways pipelines can be misconfigured, abused, or expose sensitive data.</li>\n</ul>\n<ul>\n<li>Familiarity with secrets management approaches and security practices for handling credentials in CI environments; experience with tools such as HashiCorp Vault or similar systems is helpful.</li>\n</ul>\n<ul>\n<li>Comfort collaborating across Product and engineering teams in an asynchronous, distributed environment and communicating technical tradeoffs clearly in writing.</li>\n</ul>\n<ul>\n<li>Ability to review merge requests with a security-first mindset and improve solutions through feedback and iteration.</li>\n</ul>\n<ul>\n<li>Experience debugging production issues, including investigation of security-related behavior and proposing practical fixes.</li>\n</ul>\n<ul>\n<li>Openness to learning adjacent domains and tools, including Go, container security, and software supply chain security; we welcome transferable experience from different technical backgrounds.</li>\n</ul>\n<p><strong>About the Team</strong></p>\n<p>The Pipeline Security team builds features that make GitLab CI pipelines more secure and trustworthy for teams running sensitive workloads. We own key parts of pipeline security within GitLab&#39;s CI/CD experience, with our current focus on native secrets management for CI pipelines and Supply-chain Levels for Software Artifacts (SLSA) Level 3 capabilities to strengthen software supply chain security.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_44ff0179-993","directApply":true,"hiringOrganization":{"@type":"Organization","name":"GitLab","sameAs":"https://about.gitlab.com/","logo":"https://logos.yubhub.co/about.gitlab.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/gitlab/jobs/8432221002","x-work-arrangement":"remote","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"$117,600-$252,000 USD","x-skills-required":["Ruby on Rails","Go","OpenBao","Role-Based Access Control (RBAC)","GraphQL APIs","Kubernetes deployment configuration","Helm charts","CI/CD concepts","Secrets management approaches","Security practices for handling credentials in CI environments"],"x-skills-preferred":["Container security","Software supply chain security"],"datePosted":"2026-04-18T15:45:33.847Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote, Canada; Remote, Ireland; Remote, Israel; Remote, Netherlands; Remote, United Kingdom; Remote, US"}},"jobLocationType":"TELECOMMUTE","employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"Ruby on Rails, Go, OpenBao, Role-Based Access Control (RBAC), GraphQL APIs, Kubernetes deployment configuration, Helm charts, CI/CD concepts, Secrets management approaches, Security practices for handling credentials in CI environments, Container security, Software supply chain security","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":117600,"maxValue":252000,"unitText":"YEAR"}}}]}