• Build and maintain systems using **Haskell (backend)** and **PureScript (frontend)** — with onboarding support • Work daily in **pair programming** and participate in **code reviews** • Solve problems involving: • Contribute to a system that prioritizes **correctness, reliability, and maintainability** • Work in **fully Dockerized environments** (development and execution)

• Define and drive the technical architecture for the SSCS Add-On, including backend systems for package policy enforcement, provenance generation, artifact signing, and malicious package detection. • Lead design and implementation work for Supply-chain Levels for Software Artifacts (SLSA) Level 2 and Level 3 capabilities within GitLab CI/CD. • Architect integrations with Sigstore services such as Cosign, Fulcio, and Rekor, including approaches for signing workflows, verification, and trust boundaries. • Design backend services and request paths that support allow, deny, and quarantine package policies with strong performance and reliability expectations. • Review merge requests with a focus on security, architectural consistency, maintainability, and test quality. • Mentor Backend Engineers across experience levels, helping raise the technical bar through design guidance, feedback, and hiring participation. • Partner with Product, Infrastructure, Authentication, Authorization, and Security counterparts on cross-team technical decisions. • Contribute to relevant open source and industry conversations, including working groups related to software supply chain security where appropriate.

• Design and implement backend features across the Add-On's software supply chain security surface, including policy enforcement, artifact signing and verification, provenance attestation APIs, and malicious package detection integrations • Build and improve the package policy evaluation engine, including rule compilation, request matching, enforcement decisions, and performance-sensitive execution paths tied to GitLab's Dependency Firewall infrastructure • Develop artifact signing and verification workflows, including Sigstore and Cosign integrations • Create and evolve the configuration interfaces that enterprise security teams use, including backend APIs and the GraphQL surface • Integrate Add-On capabilities with GitLab's existing security policy framework • Collaborate with adjacent teams as malicious package intelligence is incorporated into the Add-On offering • Write and maintain comprehensive RSpec and integration test coverage • Review merge requests with a security-first mindset

• Build core platform services and APIs that power AI workflows, integrations, and enterprise deployments • Design and build scalable backend services and APIs • Develop microservices for QA workflows, scoring, and insights delivery • Integrate with internal and external systems (CRM, contact center, etc.) • Build orchestration layers for AI workflows • Ensure system performance, reliability, and scalability • Collaborate with AI and data teams for seamless integration