Senior Software Engineer (Ruby), Security Platform: Authorization

Responsibilities

We are representing a confidential DevSecOps platform organization in their search for a Senior Software Engineer to join their Authorization team. In this role, you will own significant parts of the system that controls access for users, tokens, and automated agents across multiple deployment models.

Your work will center on Ruby on Rails, managing approximately 400 policy classes and a catalog of roughly 1,900 permissions that sit behind every API request. You will work on the permission model itself—including fine-grained token permissions, custom roles, and the GraphQL and REST surfaces that enforce them. You will also help migrate this model onto a next-generation authorization stack that pairs Rails with a Rust policy engine using Zanzibar-style relationship tuples and Cedar policies.

Day-to-day, you will:

• Design and ship authorization changes in a Ruby on Rails monolith where a single request can trigger hundreds of permission checks
• Own workstreams end to end, from problem definition through feature-flagged rollout, dual-run verification, and cleanup
• Build and extend fine-grained permissions for tokens and roles while keeping the permission catalog coherent as it grows
• Extend and harden authorization enforcement across GraphQL and REST API surfaces
• Refactor long-lived policy code so both the monolith and the new authorization engine can evaluate it without changing behavior for existing customers
• Improve reliability, performance, and security posture of existing authorization systems, including paying down permission-model debt
• Partner with authentication, platform, AI, and modular-service teams on interface contracts as authorization moves toward a shared service
• Drive technical decisions in writing through design docs, architecture decision records, and code review in a fully asynchronous organization

What We're Looking For

Required qualifications:

• Significant experience building and operating production Ruby on Rails applications
• Experience designing or implementing authorization systems, including role-based access control and fine-grained permissions
• A security mindset—you treat permission bugs as security bugs and reason about blast radius before elegance
• Comfort making careful changes to large, long-lived codebases through incremental refactors, feature-flagged rollouts, and migrations that must not change behavior for existing users
• Working knowledge of GraphQL and API authorization patterns
• Attention to performance at scale—you understand why one uncached check matters when it runs hundreds of times per request
• Strong written communication skills and effectiveness when most decisions happen in documents or merge requests rather than meetings

Helpful but not required:

• Rust, gRPC or Protocol Buffers, Cedar or other policy languages
• Zanzibar-style authorization systems
• Go or service-oriented architecture
• Transferable experience from adjacent domains such as identity, policy engines, and platform security

Our client welcomes candidates who are eager to learn new technologies—several engineers on this team learned Rust specifically for this work, and the organization will support your growth in the same way.

How We Work With You

When you apply through Get A Job.ai, our recruiting team will review your profile and conduct an initial screening. If there is a strong match, we will submit your candidacy to our client for consideration. Please apply exclusively through Get A Job.ai and do not contact the client directly, as doing so may disqualify your application.

This is a remote, full-time position. The team is small, distributed across time zones, works in the open, and makes decisions asynchronously in writing.

Pay

The client has indicated a base salary range of $139,200–$235,200 USD for U.S.-based candidates at this level. This range does not include bonuses, equity, or benefits, which are also part of the total compensation package.

Get A Job.ai is an equal opportunity recruiter. We welcome applicants from all backgrounds and do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic.