Engineering Manager, Software Supply Chain Security

About GitLab and Role Overview

GitLab is a leading intelligent orchestration platform for DevSecOps, trusted by over 50 million users and more than half of the Fortune 100 to enhance developer productivity, optimize operations, and accelerate digital transformation. Emphasizing AI integration, GitLab fosters a culture of continuous innovation and learning. This role is a key management position within GitLab's Software Supply Chain Security (SSCS) Add-On engineering team, focused on developing critical capabilities such as Dependency Firewall, Build Provenance, Malicious Package Detection, and Artifact Signing. As a founding manager, you'll collaborate closely with senior engineers and product managers to ensure consistent, high-quality delivery catering to enterprise customers with stringent security and compliance demands.

Key Responsibilities

• Lead a backend engineering group building essential SSCS features like dependency enforcement and artifact signing.
• Manage engineering delivery schedules aligned with general availability goals, coordinating with the Staff Backend Engineer and Product Manager on scope and timelines.
• Drive team growth by working with Talent Acquisition on recruiting strategies, designing interviews, evaluating candidates, and making hiring choices.
• Conduct regular one-on-one meetings, performance appraisals, and career development discussions to support team member growth and set clear expectations.
• Enhance engineering quality by tracking metrics such as cycle time, defect rates, and test coverage, proactively mitigating risks.
• Organize quarterly planning sessions and negotiate roadmap trade-offs alongside SSCS stage leadership and product teams.
• Collaborate with Finance and other partners on managing headcount and scaling team capacity as the SSCS Add-On expands.
• Represent the SSCS Add-On engineering team in leadership meetings, ensuring open communication across departments.

Required Qualifications and Skills

• More than three years managing backend product engineering teams within security, DevOps, or platform engineering contexts.
• Proven ability to recruit and develop backend or security engineers for distributed teams, with a solid grasp of the talent market for these positions.
• Technical proficiency to engage in architecture discussions around package registries, CI/CD pipeline security, and signing frameworks.
• Experience overseeing reliable delivery across multi-quarter product roadmaps and handling cross-team dependencies effectively.
• Comfortable operating within asynchronous, documentation-centered environments that demand excellent written communication.
• Familiarity with supply chain security, artifact management, regulatory compliance-focused products, or related domains.
• Working knowledge of security frameworks like SLSA and Sigstore ecosystems.
• Strong interpersonal skills to build trust with engineers, product stakeholders, and customers through sound judgment and collaborative coaching.

About the Team

The SSCS Add-On team belongs to GitLab’s Software Supply Chain Security stage and develops security features for regulated industrial customers. Reporting to the SSCS Senior Engineering Manager, you will coordinate closely with the Staff Backend Engineer and Product Manager. Operating remotely across multiple regions, the group prioritizes robust delivery processes, team well-being, and scalable growth with transparency and accountability.

Employee Benefits and Inclusion

• Health, financial, and well-being support benefits.
• Flexible paid time off policies.
• Team Member Resource Groups fostering diversity and inclusion.
• Equity compensation and employee stock purchase opportunities.
• Funding for professional growth and learning.
• Parental leave programs.

Additional Information

GitLab encourages candidates of diverse backgrounds to apply even if all qualifications are not met. The company is committed to equal opportunity and affirmative action hiring practices without discrimination based on any legally protected characteristics. Remote work is standard, though certain roles might have location-based eligibility requirements. Candidates with disabilities or special needs are invited to request accommodations during recruitment.