
GitLab
Senior
Take end-to-end ownership of GitLab's native Secrets Manager (Rails/Go, OpenBao, RBAC)
Interview for GitLab's Pipeline Security team, owning the native Secrets Manager built on OpenBao toward general availability. Expect Ruby on Rails and Go system-design questions centered on RBAC, GraphQL APIs, Kubernetes/Helm deployment, and a security-first code review mindset — all in a fully async, distributed team.
Step into this interview
Free · a live voice mock calibrated to this exact role
What this interview tests
- Ruby on Rails backend architecture (secure, production-quality code)
- Go for targeted components
- RBAC design and GraphQL API design
- Secrets management / CI/CD pipeline security
- Kubernetes deployment (Helm charts) and validation
Common question themes
Design an RBAC model and GraphQL API for a secrets-access feature
How would you secure a CI/CD pipeline against misconfiguration or credential leakage
Walk through your approach to reviewing a merge request with a security-first mindset
Experience with secrets management tools like HashiCorp Vault
How you communicate technical tradeoffs in an async, distributed team
Related interviews

GitLab
Senior
Senior Solutions Architect, MEA

GitLab
Senior
Senior Solutions Architect - Northeast

GitLab
Senior
Engineering Manager, Data Foundations

Senior
Senior Backend Engineer, IAM

Stripe
Senior
Backend Engineer, Privy

Cohere
Senior