Senior DevSecOps Engineer

Senior DevSecOps Engineer Location: Toronto, ON Work Model: Onsite Experience: 8+ Years (10+ Years Preferred) Job Summary We are seeking a Senior DevSecOps Engineer with strong experience in Git, GitHub, Bitbucket, CI/CD, source code management, and DevSecOps practices. The ideal candidate will support repository analysis, SCM migration, CI/CD pipeline modernization, automation, and integration validation while collaborating closely with development, DevOps, security, and platform engineering teams. Key Responsibilities • Analyze Bitbucket and GitHub repositories, including repository structures, branching strategies, permissions, access controls, and integrations. • Perform application-to-repository mapping and assess repositories for migration readiness. • Support end-to-end source code repository migration and SCM platform transition activities. • Analyze repository dependencies, build configurations, webhooks, service integrations, and CI/CD pipeline dependencies. • Support the migration and validation of CI/CD pipelines to GitHub-based workflows, including GitHub Actions. • Troubleshoot issues related to repositories, permissions, authentication, integrations, webhooks, and CI/CD pipelines. • Develop and maintain automation scripts and utilities for metadata extraction, repository validation, migration assessment, and migration automation. • Validate repository configurations, branch protections, permissions, integrations, and pipeline functionality before and after migration. • Identify migration risks, technical dependencies, gaps, and remediation requirements. • Collaborate with developers, DevOps engineers, security teams, platform teams, and application owners to resolve migration and integration issues. • Document technical findings, migration status, risks, dependencies, remediation plans, and operational procedures. • Follow DevSecOps and secure software development practices throughout repository and pipeline migration activities. Must-Have Skills • 8+ years of experience in Software Engineering, DevOps, Platform Engineering, SCM Administration, Release Engineering, or related areas; 10+ years preferred. • Strong hands-on experience with Git, GitHub, and Bitbucket. • Proven experience supporting source code repository migrations or SCM platform transitions. • Strong understanding of CI/CD pipelines, build and deployment workflows, and DevSecOps practices. • Hands-on experience with GitHub Actions, Jenkins, or equivalent CI/CD platforms. • Strong scripting/programming skills using Python, Bash, PowerShell, or Groovy. • Understanding of repository integrations, webhooks, authentication/authorization, build tools, artifact repositories, and pipeline dependencies. • Experience with repository security controls such as branch protection, access permissions, and role-based access. • Strong troubleshooting and analytical skills across SCM, CI/CD, and integration issues. • Strong communication, documentation, and cross-functional collaboration skills. Nice-to-Have Skills • Experience migrating from Bitbucket to GitHub or similar SCM platform migrations. • Experience with GitHub Enterprise and enterprise repository administration. • Knowledge of GitHub Actions workflow migration and pipeline modernization. • Experience with artifact repositories such as JFrog Artifactory or Nexus. • Familiarity with DevSecOps security scanning and code-quality tools. • Experience working in large-scale enterprise environments with complex application and repository dependencies.