Key Responsibilities
1. Pipeline Modernisation (Azure DevOps + GitHub Actions)
- Design and standardise reusable CI/CD templates (golden pipelines) across Azure DevOps (ADO) and GitHub.
- Implement service-identity-based execution, immutable artefact promotion, and automated release audit trails.
- Codify Infrastructure-as-Code (IaC) patterns using Terraform or Bicep, and establish pipeline guardrails to enable self-service.
2. GitHub Platform Engineering
- Develop automation for repository hygiene and governance, including metadata validation, branch protection, PR rules, and ownership tagging.
- Integrate GitHub Advanced Security (GHAS) for scanning and compliance reporting.
- Build automation scripts or APIs for provisioning, auditing, and federated permission management.
3. CAB and Release Readiness Enablement
- Automate release readiness reporting by integrating data from Jira, GitHub, TestRail, and pipeline logs.
- Contribute to CAB (Change Advisory Board) process standardisation and automate approvals based on test maturity and validation signals.
- Develop audit evidence bundles to support SOC2-style compliance requirements.
Deliverables
- Reusable CI/CD templates with best practices documented for GitHub and ADO.
- Automated release audit trail and CAB approval workflow.
- GitHub governance toolkit (scripts, dashboards, and compliance reports).
- Complete documentation and transition plan for handover to internal operations teams.
Required Skills & Experience
- 5+ years of experience in DevOps, Platform, or Build Engineering roles.
- Expertise in GitHub Actions, Azure DevOps YAML, and Infrastructure-as-Code (Terraform/Bicep).
- Strong scripting/development skills in Python and PowerShell.
- Experience with security and compliance automation, including GHAS and policy-as-code.
Proven ability to build self-service tooling across multi-team or federated environments