Engineering Manager, Software Supply Chain Security, Auth Infrastructure

GitLab

full-time

Posted on: 9/17/2025

Origin: • 🇺🇸 United States • California, Colorado, District of Columbia, Hawaii, Illinois

✨ AI Apply

💰 $131,600 - $282,000 per year

Mid-LevelSenior

CloudDistributed SystemsGoGRPCHAProxyKubernetesMicroservicesNGINXPostgresRustSDLC

About the role

Lead the design and implementation of GitLab's authentication infrastructure layer, including Envoy proxy configuration, token services, and policy decision infrastructure
Solve critical infrastructure challenges including bi-directional gRPC tunnels, mTLS implementation, short-lived certificate management and service mesh architecture
Ensure infrastructure supports multiple deployment models: GitLab.com (millions of users), self-managed, Dedicated, and air-gapped environments
Lead performance optimization efforts for authentication decisions at scale
Implement infrastructure monitoring, observability, and debugging capabilities for distributed authentication systems
Collaborate closely with Authentication and Authorization teams, Platform/Infrastructure teams, Cells Architecture, and Runner teams
Hire, mentor, and nurture team health while scaling engineering capabilities

Significant experience in engineering management with focus on infrastructure and distributed systems
Deep expertise in proxy technologies (Envoy, Traefik, HAProxy, nginx) and edge routing
Experience with DB technologies and storage, such as RDS, Google Spanner, Postgres or similar
Strong background in Go and/or Rust for building high-performance infrastructure services
Experience with service mesh architectures, mTLS, and zero-trust networking
Expertise in gRPC, REST APIs, and service-to-service communication patterns
Understanding of token systems (JWT, Macaroons), cryptographic signing, and key management
Knowledge of Kubernetes, container orchestration, and cloud-native deployment patterns
Proven track record of building and scaling engineering teams focused on infrastructure
Experience with infrastructure automation, CI/CD, and GitOps practices
Strong debugging and performance optimization skills for distributed systems