We are seeking an experienced Enterprise DevSecOps Platform Engineer to manage and modernize an enterprise DevSecOps toolchain supporting 300+ developers. The role involves operating existing self-hosted platforms on AWS EKS while contributing to migration toward GitHub Enterprise Cloud, GitHub Actions, and Atlassian Cloud.
Roles and Responsibilities
*Administer GitHub Enterprise Server, CloudBees CI/Jenkins, Artifactory, Xray, and SonarQube.
*Manage AWS infrastructure, EKS workloads, Kubernetes, Helm, Docker, and Terraform.
*Troubleshoot production incidents across infrastructure, networking, storage, identity, and certificates.
*Build and manage GitHub Actions Runner Controller (ARC) self-hosted runners on EKS.
*Migrate Jenkins pipelines to GitHub Actions reusable workflows.
*Plan and execute enterprise repository migrations using GitHub Enterprise Importer (GEI).
*Configure enterprise SSO, Azure AD federation, SCIM provisioning, and role-based access controls.
*Implement DevSecOps security practices, including SAST, SCA, SBOM, container scanning, and vulnerability remediation.
*Maintain automation scripts, operational runbooks, technical documentation, and change management processes.
*Support developer onboarding, platform reliability, and on-call operations.
Required Qualifications
*Bachelor's degree in a relevant discipline.
*7+ years of experience in DevOps, DevSecOps, or platform engineering.
*Hands-on experience with Jenkins/CloudBees CI, GitHub Actions, and enterprise CI/CD pipelines.
*Strong AWS expertise, including EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS, and related services.
*Production-level Kubernetes, Terraform, Helm, and Docker experience.
*Knowledge of Artifactory, Xray, SonarQube, and software supply chain security.
*Strong Linux administration, networking, TCP/IP, DNS, TLS/PKI, and certificate troubleshooting skills.
*Experience with Azure AD, SAML, OIDC, SSO, SCIM, LDAP, and RBAC.
*Proficiency in Python, Bash, and Groovy scripting.
*Strong troubleshooting, documentation, independent ownership, and incident management skills.
Preferred Qualifications
*Enterprise migration from GitHub Enterprise Server to GitHub Enterprise Cloud (EMU).
*Experience with GitHub Enterprise Importer (GEI), Actions Runner Controller (ARC), and Jenkins-to-GitHub Actions migration.
*Artifactory, Xray, SonarQube, or Atlassian Cloud migration experience.
*AWS DevOps Engineer Professional or Solutions Architect certification.
*Experience in regulated enterprise environments with formal change management processes.
Enterprise DevSecOps Platform Engineer in Venice at Unknown Company
This position is listed as full time and onsite.