Staff Software Engineer – Authentication Platform (OAuth, OIDC, SAML)
GitLab · Bengaluru
| Company | GitLab |
|---|---|
| Role | Staff Software Engineer – Authentication Platform (OAuth, OIDC, SAML) |
| Location | Bengaluru |
| Work mode | On-site |
| Experience | 6+ years |
| Job type | Full-time |
About this job
GitLab is hiring a Staff Software Engineer in Bengaluru as technical lead for authentication. You will shape how users, apps, tokens and AI agents prove their identity across GitLab.com and its self-managed and dedicated versions.
GitLab is an OAuth 2.0 and OIDC provider for millions of users and accepts SAML and LDAP from enterprise identity providers. You will help move this into GATE, a new platform with a Go token service, and lead token consolidation and identity for AI agents. The team works across time zones and makes most decisions in writing.
Eligibility
- Significant experience building and running identity systems at scale
- Deep OAuth 2.0 and OIDC: PKCE, token rotation, exchange and JWT keys
- Working knowledge of SAML 2.0 SSO and LDAP or SCIM
- Strong production Ruby on Rails or Go, willing to work in both
- Safe refactors, feature flags and backward-compatible migrations
Skills required
What you will do
- Set technical direction for OAuth, OIDC, SAML and tokens
- Write design docs and break work into small releases
- Lead migrations without breaking customers
- Threat-model new flows and lead auth incident response
- Mentor engineers and agree interfaces with other teams
How to apply
- Open the official GitLab job page with the Apply button and submit your application there.
- Tailor your resume to authentication or identity systems you led, migrations you shipped safely and incidents you handled.
Before the interview, prepare:
- OAuth authorization code with PKCE, step by step
- Refresh token rotation and token exchange (RFC 8693)
- SAML vs OIDC: when enterprises use each
- Feature-flagged migration of a token format with no downtime
Get jobs like this every day on WhatsApp. Free, no spam, only verified openings.
Join channelStay safe: DailyITJobs is not a recruitment agency and is not connected to GitLab. Apply only on the official website. Never pay anyone for a job, interview or offer letter.