Enterprise DevSecOps Platform Engineer
We are seeking an experienced Enterprise DevSecOps Platform Engineer to manage and modernize an enterprise DevSecOps toolchain supporting 300+ developers. The role involves operating existing self-hosted platforms on AWS EKS while contributing to migration toward GitHub Enterprise Cloud, GitHub Actions, and Atlassian Cloud.
Roles and Responsibilities
*Administer GitHub Enterprise Server, CloudBees CI/Jenkins, Artifactory, Xray, and SonarQube.*Manage AWS infrastructure, EKS workloads, Kubernetes, Helm, Docker, and Terraform.*Troubleshoot production incidents across infrastructure, networking, storage, identity, and certificates.*Build and manage GitHub Actions Runner Controller (ARC) self-hosted runners on EKS.*Migrate Jenkins pipelines to GitHub Actions reusable workflows.*Plan and execute enterprise repository migrations using GitHub Enterprise Importer (GEI).*Configure enterprise SSO, Azure AD federation, SCIM provisioning, and role-based access controls.*Implement DevSecOps security practices, including SAST, SCA, SBOM, container scanning, and vulnerability remediation.*Maintain automation scripts, operational runbooks, technical documentation, and change management processes.*Support developer onboarding, platform reliability, and on-call operations.
Required Qualifications
*Bachelor's degree in a relevant discipline.*7+ years of experience in DevOps, DevSecOps, or platform engineering.*Hands-on experience with Jenkins/CloudBees CI, GitHub Actions, and enterprise CI/CD pipelines.*Strong AWS expertise, including EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS, and related services.*Production-level Kubernetes, Terraform, Helm, and Docker experience.*Knowledge of Artifactory, Xray, SonarQube, and software supply chain security.*Strong Linux administration, networking, TCP/IP, DNS, TLS/PKI, and certificate troubleshooting skills.*Experience with Azure AD, SAML, OIDC, SSO, SCIM, LDAP, and RBAC.*Proficiency in Python, Bash, and Groovy scripting.*Strong troubleshooting, documentation, independent ownership, and incident management skills.
Preferred Qualifications
*Enterprise migration from GitHub Enterprise Server to GitHub Enterprise Cloud (EMU).*Experience with GitHub Enterprise Importer (GEI), Actions Runner Controller (ARC), and Jenkins-to-GitHub Actions migration.*Artifactory, Xray, SonarQube, or Atlassian Cloud migration experience.*AWS DevOps Engineer Professional or Solutions Architect certification.*Experience in regulated enterprise environments with formal change management processes.