AWS Devsecops Egineer

About the Role

We are seeking a skilled DevOps Engineer / GitHub Platform Engineer with strong expertise in GitHub Actions, GitHub Enterprise, Kubernetes, CI/CD, and DevSecOps. The ideal candidate will be responsible for designing, implementing, and managing enterprise-scale CI/CD platforms, modernizing legacy pipelines, and embedding security, governance, and automation practices across development workflows.

Responsibilities

• Design, implement, and maintain GitHub Actions CI/CD workflows across multiple repositories and environments (Development, Staging, Production).
• Build and manage Actions Runner Controller (ARC) self-hosted runners on Kubernetes (EKS), including autoscaling, pod identity, and network policies.
• Integrate and manage GitHub Advanced Security (GHAS) features including Secret Scanning, Push Protection, CodeQL, and Dependency Review.
• Migrate legacy CI/CD platforms such as Jenkins, TeamCity, AWS CodePipeline, and CodeBuild to GitHub Actions.
• Implement and enforce branch protection rules, deployment approvals, environment gates, and repository governance.
• Develop reusable GitHub composite actions and reusable workflows to standardize CI/CD practices across teams.
• Collaborate with Security teams to integrate SAST, DAST, SCA, and secrets management into CI/CD pipelines.
• Administer GitHub Enterprise Cloud (GHEC)/Enterprise Managed Users (EMU) environments, including team provisioning through SCIM and Okta.
• Monitor CI/CD platforms using Splunk, CloudWatch, and Datadog, including audit logging, alerting, and performance metrics.
• Enable Infrastructure-as-Code deployments using Terraform, AWS CloudFormation, and CDK.

Qualifications

• GitHub Actions & GitHub Enterprise Cloud (GHEC)
• GitHub Advanced Security (GHAS)
• Kubernetes (EKS) & Actions Runner Controller (ARC)
• CI/CD Pipeline Design & Automation
• Jenkins, TeamCity, AWS CodePipeline Migration
• Terraform, CloudFormation, AWS CDK
• DevSecOps (SAST, DAST, SCA, Secrets Management)
• Okta, SCIM, IAM & Identity Management
• Splunk, Datadog, CloudWatch Monitoring
• Branch Protection, Repository Governance, Release Management

Preferred Skills

• Experience managing enterprise-scale GitHub platforms.
• Strong knowledge of cloud environments, preferably AWS.
• Experience implementing secure software delivery and compliance controls.
• Excellent collaboration, automation, and platform engineering skills.