Senior DevSecOps Platform Engineer

Role : Sr DevSecOps Platform Engineer Must-have: AWS Cloud: Terra Form, Python scripting Nice-to-have: Prior migration experience, AWS certification (DevOps specifically), code quality tool experience. Interview: 1 hour Teams interview Local: Hybrid 3 days a week in office, preferred to be in-office Wednesday through Friday. Extend or covert: The goal is to convert, assuming it is approved by upper management. Notes: Day-to-Day Responsibilities Support internal teams and provide ongoing production and operational support. Investigate and resolve production issues, incident tickets, and operational requests. Work with new teams to onboard them onto the organization's development platforms and standards. Assist teams with adoption of CI/CD pipelines, GitHub, and other development tooling. Collaborate closely with development teams to ensure proper setup and integration with platform services. Partner with the Application Security (AppSec) and Cybersecurity teams to ensure security policies, standards, and compliance requirements are followed. Current Focus Support and maintain the existing platform and operational environment. Work on continuous improvements related to platform reliability, development processes, and security practices. Future Roadmap The team is planning significant consolidation and migration initiatives beginning later this year and continuing into future quarters. New team members will first become familiar with the current platform and operational processes. Once onboarded, they will contribute to upcoming roadmap projects, including platform consolidation and migration efforts. Summary: We are seeking an experienced DevSecOps platform engineer to join the DevSecOps platform team that owns the enterprise DevSecOps toolchain supporting the full software development lifecycle for 300+ developers. This is a dual-mandate role: the consultant must become productive on our existing self-hosted toolchain on AWS EKS quickly enough to carry real operational load, while contributing to our consolidation and migration to a SaaS-based toolchain. Environment Current : GitHub Enterprise Server, CloudBees CI (Jenkins) on EKS, JFrog Artifactory & Xray, SonarQube, Jira/Confluence Data Center on EKS; AWS (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS); Terraform; Helm; Docker; Prometheus/Grafana; Azure AD/SSO Target : GitHub Enterprise Cloud (EMU) with Azure AD federation and SCIM · GitHub Actions replacing CloudBees CI · Actions Runner Controller (ARC) self-hosted runners on EKS · repository migration at scale via GitHub Enterprise Importer · consolidated code security scanning · Atlassian Cloud Responsibilities: Operate the current platform :- - Administer CloudBees CI on EKS and GitHub Enterprise Server — lifecycle, upgrades, access governance, patching, and build troubleshooting - Operate Artifactory, Xray, and SonarQube; support integrations - Maintain and extend Terraform infrastructure code through PR-based pipeline workflows - Manage Kubernetes workloads on EKS — Helm releases, storage, scaling, troubleshooting - Resolve production incidents across compute, storage, networking, identity, and certificate layers; support 300+ developers - Drive vulnerability remediation and patch cadence; produce runbooks and documentation Drive consolidation and migration :- - Build and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivity - Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows - Plan and execute phased repository migration waves, with validation and rollback - Configure enterprise identity, SSO/SCIM, and access governance in the target platform - Support developer onboarding and enablement; contribute to decommissioning plans Required Qualifications: -Bachelor's degree is required -7+ years in DevOps / DevSecOps / platform engineering - Hands-on administration of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable libraries - Practical GitHub Actions experience — workflows, reusable workflows, runners, secrets - Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes - Terraform at production scale — modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker - Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates - Core systems fundamentals (non-negotiable) :- - Linux administration and troubleshooting - Networking — TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics - Certificates and TLS — PKI, issuance, and renewal, truststores, mTLS - Identity — LDAP, Azure AD / SAML / OIDC, SSO, SCIM, RBAC - Scripting in Python, Bash, and Groovy - Ability to work independently with broad ownership; strong documentation discipline; participation in on-call rotation Preferred Qualifications: - Prior GHES → GitHub Enterprise Cloud / EMU migration or Jenkins → GitHub Actions conversion at enterprise scale - GitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC) production experience - Artifactory/Xray, SonarQube, or Atlassian Cloud migration experience - AWS certification (DevOps Engineer – Professional or Solutions Architect) - Experience in a regulated enterprise environment with formal change management