Staff Infrastructure Security Engineer

WHO WE ARE ABOUT STRIPE Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. ABOUT THE TEAM Before Stripe, every growing internet platform had a payments team. Today, every growing internet platform has an Identity team. Identity verification has become core economic infrastructure for online businesses — enabling them to digitally verify their users' identities for fraud prevention, regulatory compliance, and trust and safety purposes. At Stripe, we're building something more ambitious than a verification product. Our vision is to build the world's most trusted store of verified identities — a single, global, reusable, risk-scored representation of every individual who interacts with Stripe and beyond. This Identity Store becomes a platform with compounding network effects: more verifications enrich the store; a richer store produces better fraud signals; better signals mean lower friction for trusted users; lower friction drives more adoption. Our product today serves millions of verifications per month for customers like OpenAI, Shopify, and WhatNot, and powers identity verification across multiple internal Stripe products including Fraud, Link, Connect, and Crypto. The problems ahead — adversarial AI and deepfake defense, networked identity infrastructure, progressive verification platforms, and low friction KYC APIs — sit at the frontier of what's possible in identity engineering. This role is open to candidates based in our Seattle, New York, or San Francisco offices, or remote within the US. For Stripes who live within 35 miles of an office, we offer a hybrid work environment with an expectation of in-office presence 50% of your working days each month. WHAT YOU'LL DO As a Full Stack Staff Engineer on the Identity team, you will own the technical direction of one of Stripe's most strategically important product areas. This is not a role defined by task execution — it's a role defined by technical judgment, architectural influence, and the ability to turn an ambitious vision into a reliable, scalable system. RESPONSIBILITIES * Own technical strategy — Define the architecture for Identity's core systems (Identity Store, headless verification platform, fraud detection infrastructure), make build vs. buy vs. partner decisions, and surface technical risks before they become customer-facing failures * Lead 0-1 platform development — Architect net-new systems including the Identity Store, Networked Identity platform, and advanced fraud detection pipeline (behavioral biometrics, deepfake discriminators, adversarial training). Drive the evolution from a hosted-UI product to a headless-API and embedded-components platform * Drive cross-functional alignment — Be the primary technical voice in roadmap and resourcing discussions. Partner with ML, product, legal, and engineering leads across Risk, Fraud, Link, Connect, and Crypto to ensure Identity's abstractions serve the full breadth of Stripe's product surface * Raise the technical bar — Set engineering standards across ML, backend, mobile, and front-end; lead design reviews; and mentor senior engineers on the judgment needed to operate a high-stakes, externally-facing product * Operate with ownership — Be accountable for reliability, scalability, and security of the systems you design — including the observability and alerting that catch model drift and fraud pattern shifts before customers do WHO YOU ARE We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. MINIMUM REQUIREMENTS * 10+ years of software engineering experience, including 5+ years of experience in a strategic technical leadership role * Experience leading engineering team(s) working on API design, abstractions, frameworks, or client libraries (e.g. building internal or external developer products) * Proven track record of delivering pragmatic solutions that accelerate business growth * Ability to adjust conversations from high-level discussions to detailed coding * Clear and persuasive writing and in-person communication PREFERRED QUALIFICATIONS * Experience with identity verification, fraud detection, or trust and safety systems — especially systems with adversarial inputs at scale * Familiarity with ML systems in production: model serving, training pipelines, observability, drift detection, and the feedback loops that keep models accurate under adversarial conditions * Experience building platform products with multiple consumer types — internal platform teams and external developers — where API backward compatibility and abstraction quality are first-class concerns * Prior experience with 0-1 product builds: you've started with a blank page and ended with a production system, and you have clear opinions about what makes that process go well or poorly * Experience across a range of software languages and frameworks; our stack includes primarily Ruby and TypeScript on the backend, Python for ML and data pipelines, with infrastructure spanning Kafka, Temporal, Protobuf, React, SQL (Spark and Trino dialects), Airflow, Bazel, Mongo, Splunk, and Prometheus * Experience navigating ambiguity in a fast-moving organization — you can make confident technical decisions with incomplete information and update gracefully when new constraints emerge

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. *Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. AN OVERVIEW OF THIS ROLE As a Staff Backend Engineer (AI) in the Verify stage at GitLab, you'll help shape and scale the core infrastructure behind GitLab CI. You'll play a central role in how we integrate AI into CI/CD workflows. Your work will impact performance, reliability, and usability for people running millions of CI jobs, from small teams to the largest enterprises. AI is a top priority in the year ahead. In this role, you'll go beyond using AI tools and help define how we design, build, and iterate on AI-assisted and agentic CI experiences. You'll set standards for what good looks like across our AI agent portfolio, including how we measure success, how we instrument behavior in production, and how we account for large language model limitations. You'll also help responsibly integrate GitLab's Duo Agent Platform into CI workflows at scale, on a foundation that's fast, reliable, secure, and observable. We have ambitious goals for Agentic CI in FY27. As a Staff Engineer, you will: * Partner with Engineering, Product, and UX leadership to pressure-test our priorities: where we can move faster, where we're missing data, and where there's whitespace to innovate. Part of this includes learning and growing with the Engineering team you will collaborate closely with. * Define what success looks like across our agent portfolio and make sure we're tracking against it — not just shipping, but learning. * Bring a sharp eye to the competitive landscape, helping us understand what it takes to keep GitLab CI best-in-class in an increasingly agentic world. * Examples of Agentic CI work we have planned for the upcoming year: * AI Pipeline Builder, the foundational CI agent that auto-creates pipelines for new projects and serves as the launchpad for onboarding new CI users. * Automate the Fix a Failing Pipeline flow at scale – from dogfooding on internal GitLab projects through to safe, controlled rollout for customers, solving real infrastructure and scalability challenges. * Build the instrumentation and observability layer that makes agentic CI trustworthy — trigger volume dashboards, retry rates, cost safeguards — so we can measure what's working, catch what isn't, and iterate with confidence. * Harden the CI pipeline execution infrastructure that these agents depend on: database access patterns, background processing, and job orchestration built to handle the additional load that AI-driven automation introduces at enterprise scale. WHAT YOU’LL DO * Shape and scale GitLab CI backend infrastructure to improve performance, reliability, and usability for users running jobs at high volume. * Design and implement AI-powered features for Agentic CI, including agents, agentic flows, and LLM-backed tooling that integrates with GitLab's Duo Agent Platform. * Define what success looks like for AI in CI before you build, including baselines, measurable outcomes, and clear signals that help the team learn and iterate. * Build the instrumentation and observability needed to make AI-assisted CI trustworthy in production, including feature behavior metrics, dashboards, and safeguards. * Own and drive measurable performance improvements across CI systems (for example, database access patterns, background processing, and job orchestration) by forming hypotheses, running experiments, and validating results with data. * Write secure, well-tested, maintainable Ruby on Rails code in a large monolith, improving existing features while reducing technical debt and operational risk. * Lead cross-functional technical work with Product, UX, and Infrastructure, influencing architecture and execution across the Verify stage. * Share standards, patterns, and learnings with other engineers, raising the bar for responsible AI integration and evidence-driven engineering across CI. WHAT YOU’LL BRING * Advanced proficiency with Ruby and Ruby on Rails, with experience building and maintaining reliable backend services in a large codebase. * Strong PostgreSQL skills, including data modeling, query tuning, and scaling large tables through proactive performance investigation and remediation. * Hands-on experience building, running, and debugging high-traffic production systems, ideally in CI, workflow orchestration, or adjacent infrastructure-heavy domains. * Practical experience designing and shipping AI-powered backend features and integrations, including sound judgment about large language model limitations and responsible use in production. * A data-driven approach to engineering: defining hypotheses, establishing baseline metrics, instrumenting changes, and measuring outcomes against clear success criteria. * Familiarity with observability patterns and tools (metrics, logging, tracing) to diagnose issues, improve reliability, and guide iteration. * Strong backend architecture and delivery practices, including secure design, well-tested code, and strategies for safe rollouts and zero-downtime changes. * Clear written and verbal communication skills, including writing technical proposals and documentation, and collaborating effectively in a remote, asynchronous, cross-functional environment. ABOUT THE TEAM The Verify stage focuses on collaboration, iteration, and helping GitLab users run fast, reliable, and scalable Continuous Integration (CI) pipelines for projects of all sizes, from small teams to large enterprises. For more on how we work, see Team Handbook Page and Related Initiative. Remote-Global HOW GITLAB SUPPORTS FULL-TIME EMPLOYEES * Benefits to support your health, finances, and well-being * Flexible Paid Time Off  * Team Member Resource Groups * Equity Compensation & Employee Stock Purchase Plan * Growth and Development Fund * Parental Leave  Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. ---------------------------------------------------------------------------------------------------------------------------------- Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.   Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.