About the Role
We are seeking a skilled DevOps Engineer / GitHub Platform Engineer with strong expertise in GitHub Actions, GitHub Enterprise, Kubernetes, CI/CD, and DevSecOps. The ideal candidate will be responsible for designing, implementing, and managing enterprise-scale CI/CD platforms, modernizing legacy pipelines, and embedding security, governance, and automation practices across development workflows.
Responsibilities
- Design, implement, and maintain GitHub Actions CI/CD workflows across multiple repositories and environments (Development, Staging, Production).
- Build and manage Actions Runner Controller (ARC) self-hosted runners on Kubernetes (EKS), including autoscaling, pod identity, and network policies.
- Integrate and manage GitHub Advanced Security (GHAS) features including Secret Scanning, Push Protection, CodeQL, and Dependency Review.
- Migrate legacy CI/CD platforms such as Jenkins, TeamCity, AWS CodePipeline, and CodeBuild to GitHub Actions.
- Implement and enforce branch protection rules, deployment approvals, environment gates, and repository governance.
- Develop reusable GitHub composite actions and reusable workflows to standardize CI/CD practices across teams.
- Collaborate with Security teams to integrate SAST, DAST, SCA, and secrets management into CI/CD pipelines.
- Administer GitHub Enterprise Cloud (GHEC)/Enterprise Managed Users (EMU) environments, including team provisioning through SCIM and Okta.
- Monitor CI/CD platforms using Splunk, CloudWatch, and Datadog, including audit logging, alerting, and performance metrics.
- Enable Infrastructure-as-Code deployments using Terraform, AWS CloudFormation, and CDK.
Qualifications
- GitHub Actions & GitHub Enterprise Cloud (GHEC)
- GitHub Advanced Security (GHAS)
- Kubernetes (EKS) & Actions Runner Controller (ARC)
- CI/CD Pipeline Design & Automation
- Jenkins, TeamCity, AWS CodePipeline Migration
- Terraform, CloudFormation, AWS CDK
- DevSecOps (SAST, DAST, SCA, Secrets Management)
- Okta, SCIM, IAM & Identity Management
- Splunk, Datadog, CloudWatch Monitoring
- Branch Protection, Repository Governance, Release Management
Preferred Skills
- Experience managing enterprise-scale GitHub platforms.
- Strong knowledge of cloud environments, preferably AWS.
- Experience implementing secure software delivery and compliance controls.
- Excellent collaboration, automation, and platform engineering skills.
