[Remote] Engineering Manager, SSCS: Supply Chain

Note: The job is a remote job and is open to candidates in USA. GitLab is hiring an Engineering Manager to lead its Software Supply Chain Security (SSCS) Add-On engineering team. The role focuses on developing the backend team, coordinating roadmap and delivery, and building reliable security capabilities for enterprise customers with strict security and compliance needs.

Responsibilities

• Guide a backend engineering team building the SSCS Add-On across dependency enforcement, build provenance, malicious package detection, and artifact signing
• Be responsible for Drive engineering delivery for general availability milestones by aligning sequencing, scope, and dependencies with the Staff Backend Engineer and Product Manager
• Develop the team by partnering with Talent Acquisition on sourcing, interview design, candidate evaluation, and hiring decisions
• Run regular 1:1s, performance reviews, and career development conversations that enable growth and clear expectations
• Advance engineering quality by monitoring cycle time, defect rates, and test coverage, and by addressing risks early
• Coordinate quarterly planning and roadmap tradeoff discussions with SSCS stage leadership and Product
• Work with Finance and other partners on headcount pacing and team planning as the Add-On scales
• Represent the SSCS Add-On team within stage leadership discussions and help ensure strong communication across functions

Skills

• Over 3 years of experience guiding backend product engineering teams in security, DevOps, or platform engineering environments
• Ability to hire and grow backend or security engineers in distributed team environments, with practical understanding of the talent landscape for these roles
• Technical credibility to contribute to architecture discussions involving package registries, CI/CD pipeline security, and signing infrastructure
• Experience managing predictable delivery across multi-quarter product roadmaps and managing cross-team dependencies
• Comfort working in an asynchronous, documentation-driven organization with clear written communication
• Familiarity with supply chain security, artifact management, or compliance-focused product areas, or transferable experience from related domains
• Working knowledge of concepts related to frameworks and ecosystems such as SLSA and Sigstore
• Ability to build credibility with engineers, product partners, and customer-facing stakeholders through clear judgment, coaching, and teamwork

Benefits

• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave

Company Overview