Engineering Manager, SSCS: Supply Chain
Leads and develops a backend engineering team delivering GitLab’s Software Supply Chain Security Add-On, including dependency enforcement, build provenance, malicious package detection, and artifact signing. Requires 3+ years guiding backend product engineering teams and experience with roadmap delivery, hiring, and security or platform environments.
About the job
Responsibilities
- Guide a backend engineering team building the SSCS Add-On across dependency enforcement, build provenance, malicious package detection, and artifact signing.
- Drive engineering delivery for general availability milestones by aligning sequencing, scope, and dependencies with the Staff Backend Engineer and Product Manager.
- Partner with Talent Acquisition on sourcing, interview design, candidate evaluation, and hiring decisions.
- Run regular 1:1s, performance reviews, and career development conversations.
- Improve engineering quality by monitoring cycle time, defect rates, and test coverage, and addressing risks early.
- Coordinate quarterly planning and roadmap tradeoff discussions with SSCS stage leadership and Product.
- Work with Finance and other partners on headcount pacing and team planning.
- Represent the SSCS Add-On team within stage leadership discussions and ensure strong cross-functional communication.
Requirements
- More than 3 years of experience guiding backend product engineering teams in security, DevOps, or platform engineering environments.
- Ability to hire and grow backend or security engineers in distributed team environments.
- Technical credibility to contribute to architecture discussions involving package registries, CI/CD pipeline security, and signing infrastructure.
- Experience managing predictable delivery across multi-quarter product roadmaps and cross-team dependencies.
- Strong written communication in an asynchronous, documentation-driven organization.
- Familiarity with supply chain security, artifact management, compliance-focused product areas, or related domains.
- Working knowledge of frameworks and ecosystems such as SLSA and Sigstore.
- Ability to build credibility with engineers, product partners, and customer-facing stakeholders through judgment, coaching, and teamwork.
Benefits
- Flexible paid time off
- Team member resource groups
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave
Skills
Backend Engineering, Software Supply Chain Security, DevOps, Platform Engineering, Package Registries, CI/CD, Pipeline Security, Artifact Signing, Slsa, Sigstore, Artifact Management, Test Coverage
Similar jobs
Engineering Management jobsLeads a team responsible for internal developer platforms, SRE tooling, automation, and production reliability in cloud environments. Requires people-management experience, strong security and infrastructure expertise, and a bachelor's degree or equivalent experience.
Leads a technical engineering team responsible for large-scale distributed services and GitLab Dedicated infrastructure. The role requires strong operational expertise, experience managing high-performing remote teams, and the ability to guide architecture, incident response, automation, and AI-enabled productivity.
Leads and develops Dandy’s Sales Engineering team, partnering with Account Executives to support revenue growth through technical sales, product demonstrations, and customer advisory. Requires at least five years of dental-industry Sales Engineering experience and strong people leadership skills.
Engineering manager leading the Client Foundations team responsible for libraries, tooling, security, and infrastructure across device platforms. Requires significant software development experience, mobile or macOS expertise, and engineering people-management experience.
Leads a globally distributed team responsible for deployment tooling, upgrades, reliability, and operational simplicity across GitLab deployment models. Requires platform or SRE leadership experience, strong Kubernetes and Helm expertise, and the ability to guide distributed teams through complex operational challenges.