Summary
✨ AI‑Generated
Take technical ownership of a major platform modernization initiative. You will design a Git-based enterprise foundation, reusable CI/CD workflow libraries, secure self-hosted runner infrastructure, and integrations with enterprise security and artifact-management tooling while establishing standards for migration from legacy automation.
Highlights
Own the architecture of a large-scale platform modernization initiative, designing reusable delivery standards, secure developer workflows, and cloud-aware infrastructure foundations.
Description
Job description: Senior Platform/DevOps Architect
Role summary: Technical owner of the target platform.
Designs and builds the GitHub Enterprise Cloud landing zone and the golden-path reusable workflow library that every migrated repository consumes — the standardisation layer the whole migration lands on.
Key responsibilities:
Design the GHEC foundation: org/repo topology, SSO/SCIM identity integration, Rulesets, branch protection, CODEOWNERS strategy, and marketplace/actions allowlist governance.
Author and version the golden-path reusable GitHub Actions workflows per archetype (Java/Maven, Node/TS, Python, container, Terraform, etc.), consumed by reference (uses: org/repo@version) — never copied — with drift detection.
Design the self-hosted runner topology (residency-aware, Azure/AWS network routes) and integrate enterprise tooling: GHAS (secret/code scanning), Snyk/Sonar-class scanners, Vault/CyberArk, Artifactory.
Define the Jenkins→Actions conversion standards the AI agents implement: secrets re-binding, shared-library equivalence, trigger mapping, artefact handling (including Git LFS / artefact-store strategy for large in-repo binaries).
Act as design authority on the bespoke long-tail — the complex pipelines agents can't fully convert — and review agent-generated PRs for architectural soundness.
Partner with client platform/security teams; prepare the platform handover to client BAU.
Required skills & experience:
12+ years platform/DevOps engineering; 4+ years deep GitHub Actions (reusable workflows, composite actions, self-hosted runners at scale).
Expert Jenkins internals: declarative and scripted pipelines, shared libraries, multibranch, trigger graphs — and Bitbucket Server administration.
Enterprise CI/CD architecture: promotion models, environment strategy, secrets management, policy-as-code.
GHAS or equivalent AppSec tooling integration; IaC (Terraform) for platform provisioning.
Strong written design skills — ADRs, standards, runbooks that survive handover.
Desirable: GEI migration experience; Kubernetes; APRA-regulated environment exposure; contribution to internal developer platforms / golden-path programmes.
