# Staff Backend Engineer, Software Supply Chain Security

**Company:** [GitLab](https://hotfix.jobs/companies/gitlab)
**Location:** Remote
**Role:** Backend Engineering
**Experience:** 7+ years
**Skills:** Ruby on Rails, Go, Gitlab Ci/Cd, Slsa, Sigstore, Cosign, Fulcio, Rekor, Artifact Signing, Build Provenance, Dependency Security, Sbom, Backend Architecture, Package Policy Enforcement, Malicious Package Detection
**Posted:** 2026-08-11

> Leads the architecture and implementation of high-scale backend systems for GitLab’s software supply chain security offering, including package policy enforcement, provenance, artifact signing, and malicious package detection. Requires strong Ruby on Rails and Go experience, security expertise, and cross-team technical leadership.

## Job Description

## Responsibilities
- Define and drive the technical architecture for the Software Supply Chain Security Add-On, including backend systems for package policy enforcement, provenance generation, artifact signing, and malicious package detection.
- Lead design and implementation of Supply-chain Levels for Software Artifacts (SLSA) Level 2 and Level 3 capabilities within GitLab CI/CD.
- Architect integrations with Sigstore services such as Cosign, Fulcio, and Rekor, including signing workflows, verification, and trust boundaries.
- Design backend services and request paths supporting allow, deny, and quarantine package policies with strong performance and reliability.
- Review merge requests for security, architectural consistency, maintainability, and test quality.
- Mentor Backend Engineers across experience levels through design guidance, feedback, and hiring participation.
- Partner with Product, Infrastructure, Authentication, Authorization, and Security teams on cross-team technical decisions.
- Contribute to relevant open-source and industry discussions, including software supply chain security working groups where appropriate.

## Requirements
- Strong experience building backend applications with Ruby on Rails in a high-scale production environment.
- Professional experience with Go for backend or infrastructure-oriented services.
- Track record of leading architecture across multiple systems and influencing technical direction through sound engineering judgment.
- Experience writing technical proposals, request-for-comments documents, and decision records in an asynchronous, documentation-first environment.
- Strong security mindset and comfort building products where trust, risk reduction, and secure defaults are central requirements.
- Familiarity with software supply chain security concepts such as build provenance, artifact signing, dependency security, or software bills of materials.
- Strong teamwork and communication skills, with the ability to work effectively across distributed teams and functions.
- Interest in GitLab's values and in building secure, scalable product capabilities.

## Compensation and Benefits
- Flexible paid time off.
- Team member resource groups.
- Equity compensation and employee stock purchase plan.
- Growth and development fund.
- Parental leave.

## Similar jobs

- [Sr. Staff Engineer - Payments & Commerce Platform](https://hotfix.jobs/jobs/153f52a7-9c89-4b7b-b5f1-fd9fa8b0f5d8) - GoHighLevel - Remote
- [Staff Software Engineer - Financial Integrity](https://hotfix.jobs/jobs/628b08cc-4a96-4422-8259-827b91dafd1e) - Rippling - Bengaluru, India
- [Staff Backend Engineer](https://hotfix.jobs/jobs/127bb501-4fd5-435d-92d9-d47c9bf13f75) - GitLab - Remote - $153k – $259k/yr
- [Staff Software Engineer, Security Platform](https://hotfix.jobs/jobs/4781c25d-fac1-4310-82f6-3708762dc1df) - Coinbase - Remote - ₹9.4M – ₹9.4M/yr
- [Staff Engineer](https://hotfix.jobs/jobs/266a6958-bad8-43f5-a0de-de4c0c7c2e8e) - Reltio - Bengaluru, India

**Apply:** https://hotfix.jobs/jobs/50fc8454-a627-46f2-b2d7-2fc900bd567e
**Canonical:** https://hotfix.jobs/jobs/50fc8454-a627-46f2-b2d7-2fc900bd567e