Specialty
Who is hiring is shown to signed-in users. Create a free account to see the employer and apply.
The role
The company is hiring a Senior Software Engineer (Ruby) for its Authorization team, which controls what users, tokens and AI agents can access on the company. The work is in the Rails monolith and a move to a Rust policy engine. The team is distributed and works asynchronously.
What you will do
- Design and ship authorization changes in the Ruby on Rails monolith
- Own a workstream from problem definition through feature-flagged rollout and cleanup
- Build fine-grained permissions for tokens and roles and keep the permission catalog coherent
- Harden authorization enforcement across GraphQL and the REST API
- Refactor policy code so the monolith and the new authorization engine can both evaluate it
- Partner with authentication, platform and AI teams on interface contracts and document decisions in writing
What they ask for
- Significant experience building and operating production Ruby on Rails applications
- Experience designing authorization systems, including RBAC and fine-grained permissions
- Security mindset, treating permission bugs as security bugs
- Experience making careful changes to large codebases through incremental refactors and feature flags
- Working knowledge of GraphQL and API authorization patterns
- Attention to performance at scale
- Strong written communication for asynchronous work
This is our own short reading of the posting. The full description, and anything that has changed since, is on the employer's careers page behind the apply button.