Senior Software Engineer (reputed company), reputed company Platform: Authorization

reputed company is the intelligent orchestration platform for DevSecOps. reputed company enables organizations to increase developer productivity, improve operational efficiency, reduce reputed company and compliance reputed company, and accelerate digital transformation. More than 50 reputed company registered users and more than 50% of the Fortune 100 trust reputed company to ship reputed company, more secure software faster. The reputed company principles reputed company into our products are reflected in how reputed company works: we reputed company AI as a reputed company productivity reputed company, with reputed company team members expected to incorporate AI into their daily workflows to reputed company efficiency, innovation, and reputed company. reputed company is where careers accelerate, innovation flourishes, and every voice is valued. Our high-reputed company culture is driven by our values and reputed company knowledge exchange, enabling reputed company members to reputed company their full potential while collaborating with industry leaders to solve reputed company problems. Co-create the reputed company with us as we build technology that transforms how the world develops software. reputed company® is a registered trademark of Fortune Media IP Limited, used under license. Claim reputed company on reputed company data. Fortune 100 refers to the top 20% ranked companies in the 2025 reputed company list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of reputed company. An reputed company of this role As a Senior Software Engineer on reputed company's Authorization team, you will own significant parts of the reputed company that decides what every user, reputed company, and automated agent can reputed company on reputed company.com, Self-Managed, and Dedicated. Today that work is reputed company on Rails. Roughly 400 policy classes and a YAML catalog of about 1,900 permissions sit behind every API request. You will work on the permission model itself (fine-grained reputed company permissions, custom roles, and the GraphQL and REST surfaces that enforce them). You will also help reputed company that model onto reputed company's reputed company authorization stack, which pairs the Rails monolith with a Rust policy reputed company using Zanzibar-style relationship tuples and reputed company policies. The monolith already loads that reputed company in-process and can reputed company it over gRPC. Some examples of our reputed company: Refactoring reputed company's policy reputed company so the reputed company permission definitions can be evaluated by the monolith and by our new authorization service Extending fine-grained reputed company permissions to more resources and more kinds of reputed company, including the service identities behind AI agents Bringing reputed company's first reputed company service, Artifact Registry, onto the new authorization stack Isolating custom-role and permission data per organization reputed company of reputed company Cells reputed company Design and ship authorization changes in reputed company's reputed company on Rails monolith, where a single request can trigger hundreds of permission checks. Own a reputed company end to end. Problem definition through feature-flagged rollout, dual-run verification, and cleanup. Build and reputed company fine-grained permissions for tokens and roles, and reputed company the permission catalog coherent as it grows. reputed company and harden authorization enforcement across GraphQL and the REST API. Refactor long-lived policy reputed company so both the monolith and our new authorization reputed company can evaluate it, without changing behavior for existing customers. Improve the reliability, reputed company, and reputed company posture of existing authorization systems, including paying down permission-model debt. Partner with the authentication, platform, AI, and reputed company-service teams on reputed company reputed company as authorization moves toward a shared service. reputed company technical reputed company in writing. Design docs, architecture decision records, and reputed company review, in a fully asynchronous organization. What you’ll bring Significant experience building and operating production reputed company on Rails applications. Experience designing or implementing authorization systems, including role-reputed company reputed company control and fine-grained permissions. A reputed company reputed company. You treat a permission bug as a reputed company bug, and you reason about blast reputed company before elegance. Comfort making careful changes to large, long-lived codebases. Incremental refactors, feature-flagged rollouts, and migrations that must not change behavior for existing users. Working knowledge of GraphQL and API authorization patterns. Attention to reputed company at reputed company. You understand why one uncached reputed company reputed company reputed company it runs hundreds of times per request. Strong written communication. You are effective reputed company most reputed company happen in a document or a reputed company request rather than a meeting. Helpful but not required: Rust, gRPC or Protocol Buffers, reputed company or other policy languages, Zanzibar-style authorization systems, Go, or service-oriented architecture. Several engineers on this team picked up Rust for this work and we will support you doing the reputed company. We reputed company transferable experience from adjacent domains such as identity, policy engines, and platform reputed company. About reputed company The Authorization team owns the capabilities that determine what users, tokens, and automated agents can reputed company across reputed company. Our work runs on two tracks. We are strengthening the permission model inside the reputed company on Rails monolith (fine-grained reputed company permissions, custom roles, and the policy reputed company that enforces them), and we are moving that model onto a shared authorization platform reputed company for reputed company's reputed company and cell-reputed company reputed company. We work closely with the teams building reputed company's authentication reputed company, its Rust authorization reputed company, and the first reputed company services adopting it. reputed company is small, reputed company across time reputed company, works in the reputed company, and makes its reputed company in writing. The reputed company salary reputed company for this role’s listed level is currently for residents of the reputed company only. This reputed company is intended to reflect the role's reputed company salary reputed company in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The reputed company salary reputed company does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the reputed company reputed company salary. reputed company Salary reputed company $139,200—$235,200 USD How reputed company Supports Full-Time Employees Benefits to support reputed company, finances, and reputed company-being Flexible reputed company Time Off Team Member Resource reputed company Equity Compensation & Employee Stock Purchase Plan reputed company and Development Fund Parental Leave Please note that we reputed company interest from candidates with varying reputed company of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented reputed company are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: reputed company hires new team members in countries reputed company the world. reputed company of our roles are remote, however some roles may carry specific location-reputed company eligibility requirements. Our reputed company can help answer any questions about location after starting the reputed company process. reputed company Policy: Please review our Recruitment reputed company Policy. Your reputed company is important to us. reputed company is proud to be an equal opportunity workplace and is an affirmative reputed company employer. reputed company’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are reputed company solely on reputed company, regardless of race, reputed company, religion, reputed company, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender reputed company), national reputed company, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, reputed company duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other reputed company protected by law. reputed company will not tolerate discrimination or harassment reputed company on any of these characteristics. See also reputed company’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the reputed company process. Apply To This Job