Intermediate Backend Engineer, Authorization

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Intermediate Backend Engineer, Authorization based in India.

As an Intermediate Backend Engineer specializing in Authorization, you will contribute to building and maintaining the systems that control access to applications, data, and services across a large-scale DevSecOps platform. You will work on critical authorization infrastructure, ensuring that users, access tokens, and automated agents have the appropriate permissions while maintaining high standards of security and performance. Using Ruby on Rails, you will develop and improve permission models, access policies, and API authorization mechanisms. You will also contribute to the evolution of the platform's authorization architecture, including the integration of a new Rust-based policy engine. Working alongside experienced engineers in a fully remote and asynchronous environment, you will progressively take ownership of increasingly complex engineering projects. This is an opportunity to develop expertise in application security, distributed systems, and modern authorization technologies.

Accountabilities In this role, you will help develop, maintain, and modernize authorization systems while ensuring that access controls remain reliable, secure, and performant. Your main responsibilities will include:

-

Implement authorization features and improvements within a Ruby on Rails monolithic application, ensuring that legitimate access is granted and unauthorized access is consistently denied.

-

Deliver well-defined engineering projects, from feature-flagged implementation and rollout to validation of results, with guidance and code reviews from senior engineers.

-

Develop and extend fine-grained permission models for access tokens and custom roles, expanding authorization coverage across additional resources.

-

Improve authorization enforcement across GraphQL and REST APIs to ensure consistent application of permission rules.

-

Refactor existing policy code incrementally while preserving established behavior and avoiding disruptions for existing customers.

-

Investigate and resolve security vulnerabilities, reliability issues, and performance bottlenecks affecting authorization mechanisms.

-

Contribute to the migration toward a modern authorization architecture combining the existing application framework with a Rust-based policy engine.

-

Help validate that legacy and new authorization systems produce consistent permission evaluation results.

-

Collaborate with authentication, platform, and AI engineering teams to define and document interface contracts supporting a shared authorization service.

-

Participate in technical design discussions, prepare engineering documentation, contribute to merge requests, and review code asynchronously.