AWS Devsecops Engineer

Job description

**DevOps Engineer / GitHub Platform Engineer** **Exp: 7+years** **Location: Pan India** **Job Summary** We are seeking a skilled **DevOps Engineer / GitHub Platform Engineer** with strong expertise in **GitHub Actions, GitHub Enterprise, Kubernetes, CI/CD, and DevSecOps**. The ideal candidate will be responsible for designing, implementing, and managing enterprise-scale CI/CD platforms, modernizing legacy pipelines, and embedding security, governance, and automation practices across development workflows. **Key Responsibilities** - Design, implement, and maintain **GitHub Actions CI/CD workflows** across multiple repositories and environments (Development, Staging, Production). - Build and manage **Actions Runner Controller (ARC) self-hosted runners** on Kubernetes (EKS), including autoscaling, pod identity, and network policies. - Integrate and manage **GitHub Advanced Security (GHAS)** features including Secret Scanning, Push Protection, CodeQL, and Dependency Review. - Migrate legacy CI/CD platforms such as **Jenkins, TeamCity, AWS CodePipeline, and CodeBuild** to GitHub Actions. - Implement and enforce **branch protection rules, deployment approvals, environment gates, and repository governance**. - Develop reusable **GitHub composite actions and reusable workflows** to standardize CI/CD practices across teams. - Collaborate with Security teams to integrate **SAST, DAST, SCA, and secrets management** into CI/CD pipelines. - Administer **GitHub Enterprise Cloud (GHEC)/Enterprise Managed Users (EMU)** environments, including team provisioning through **SCIM and Okta**. - Monitor CI/CD platforms using **Splunk, CloudWatch, and Datadog**, including audit logging, alerting, and performance metrics. - Enable Infrastructure-as-Code deployments using **Terraform, AWS CloudFormation, and CDK**. **Required Skills** - GitHub Actions & GitHub Enterprise Cloud (GHEC) - GitHub Advanced Security (GHAS) - Kubernetes (EKS) & Actions Runner Controller (ARC) - CI/CD Pipeline Design & Automation - Jenkins, TeamCity, AWS CodePipeline Migration - Terraform, CloudFormation, AWS CDK - DevSecOps (SAST, DAST, SCA, Secrets Management) - Okta, SCIM, IAM & Identity Management - Splunk, Datadog, CloudWatch Monitoring - Branch Protection, Repository Governance, Release Management **Preferred Qualifications** - Experience managing enterprise-scale GitHub platforms. - Strong knowledge of cloud environments, preferably **AWS**. - Experience implementing secure software delivery and compliance controls. - Excellent collaboration, automation, and platform engineering skills.