ENTERPRISE DEVSECOPS PLATFORM ENGINEER

About the role

We are seeking an experienced Enterprise DevSecOps Platform Engineer to manage and modernize an enterprise DevSecOps toolchain supporting 300+ developers. The role involves operating existing self-hosted platforms on AWS EKS while contributing to migration toward GitHub Enterprise Cloud, GitHub Actions, and Atlassian Cloud.

Responsibilities

• Administer GitHub Enterprise Server, CloudBees CI/Jenkins, Artifactory, Xray, and SonarQube.
• Manage AWS infrastructure, EKS workloads, Kubernetes, Helm, Docker, and Terraform.
• Troubleshoot production incidents across infrastructure, networking, storage, identity, and certificates.
• Build and manage GitHub Actions Runner Controller (ARC) self-hosted runners on EKS.
• Migrate Jenkins pipelines to GitHub Actions reusable workflows.
• Plan and execute enterprise repository migrations using GitHub Enterprise Importer (GEI).
• Configure enterprise SSO, Azure AD federation, SCIM provisioning, and role-based access controls.
• Implement DevSecOps security practices, including SAST, SCA, SBOM, container scanning, and vulnerability remediation.
• Maintain automation scripts, operational runbooks, technical documentation, and change management processes.
• Support developer onboarding, platform reliability, and on-call operations.

Qualifications

Required:

• Bachelor's degree in a relevant discipline.
• 7+ years of experience in DevOps, DevSecOps, or platform engineering.
• Hands-on experience with Jenkins/CloudBees CI, GitHub Actions, and enterprise CI/CD pipelines.
• Strong AWS expertise, including EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS, and related services.
• Production-level Kubernetes, Terraform, Helm, and Docker experience.
• Knowledge of Artifactory, Xray, SonarQube, and software supply chain security.
• Strong Linux administration, networking, TCP/IP, DNS, TLS/PKI, and certificate troubleshooting skills.
• Experience with Azure AD, SAML, OIDC, SSO, SCIM, LDAP, and RBAC.
• Proficiency in Python, Bash, and Groovy scripting.
• Strong troubleshooting, documentation, independent ownership, and incident management skills.

Preferred:

• Enterprise migration from GitHub Enterprise Server to GitHub Enterprise Cloud (EMU).
• Experience with GitHub Enterprise Importer (GEI), Actions Runner Controller (ARC), and Jenkins-to-GitHub Actions migration.
• Artifactory, Xray, SonarQube, or Atlassian Cloud migration experience.
• AWS DevOps Engineer Professional or Solutions Architect certification.
• Experience in regulated enterprise environments with formal change management processes.