JobScans.in

Job description

**Role** **AWS DevSecOps GITHUB** **Key Responsibilities\\*** Below are the specifics of the role: - Design, implement, and maintain GitHub Actions workflows for CI/CD across multiple repositories and environments (dev, staging, production) - Build and manage self-hosted ARC (Actions Runner Controller) runners on Kubernetes (EKS), including runner scaling, pod identity, and network policies - Integrate GitHub Advanced Security (GHAS) capabilities — secret scanning, push protection, code scanning (CodeQL), and dependency review — into developer workflows - Migrate legacy CI/CD pipelines (Jenkins, TeamCity, CodePipeline/CodeBuild) to native GitHub Actions - Enforce branch protection rules, required status checks, environment gates, and deployment approvals - Develop reusable composite actions and reusable workflows to standardize pipeline patterns across teams - Collaborate with InfoSec to embed SAST, DAST, SCA, and secrets hygiene into every pipeline stage - Maintain GitHub Enterprise (EMU or GHEC) organization settings, team provisioning via SCIM/Okta, and repository governance policies - Instrument pipelines with audit logging, metrics, and alerting (Splunk, CloudWatch, Datadog) - Support infrastructure-as-code deployments via GitHub Actions (Terraform, CloudFormation, CDK)