Senior AWS DevSecOps Platform Engineer - Terraform, Kubernetes & GitHub

Dev Sec Ops  Platform Engineer

We are seeking an experienced Dev Sec Ops  platform engineer to join the Dev Sec Ops  platform team that owns the enterprise Dev Sec Ops  toolchain supporting the full software development lifecycle for 300+ developers. This is a dual-mandate role: the consultant must become productive on our existing self-hosted toolchain on AWS EKS quickly enough to carry real operational load, while contributing to our consolidation and migration to a SaaS-based toolchain.

Required

Education:

A bachelor's degree is required. Preferred Certification: AWS certification (Dev Ops Engineer – Professional or Solutions Architect).

Required Qualifications:

• 7+ years in Dev Ops / Dev Sec Ops  / platform engineering.
• Hands-on administration of an enterprise CI platform (Jenkins/Cloud Bees preferred) and pipeline development using shared/reusable libraries.
• Practical Git Hub Actions experience — workflows, reusable workflows, runners, secrets.
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes.
• Terraform at production scale — modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker.
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates.
• Core systems fundamentals (non-negotiable).
• Linux administration and troubleshooting.
• Networking — TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics.
• Certificates and TLS — PKI, issuance, and renewal, trust stores, mTLS.
• Identity — LDAP, Azure AD / SAML / OIDC, SSO, SCIM, RBAC.
• Scripting in Python, Bash, and Groovy.
• Ability to work independently with broad ownership; strong documentation discipline; participation in on-call rotation.

Preferred Qualifications:

• Prior GHES → Git Hub Enterprise Cloud / EMU migration or Jenkins → Git Hub Actions conversion at enterprise scale.
• Git Hub Enterprise Importer (GEI) and Actions Runner Controller (ARC) production experience.
• Artifactory/Xray, Sonar Qube, or Atlassian Cloud migration experience.
• AWS certification (Dev Ops Engineer – Professional or Solutions Architect).
• Experience in a regulated enterprise environment with formal change management.

Job Responsibilities:

• Administer Cloud Bees CI on EKS and Git Hub Enterprise Server — lifecycle, upgrades, access governance, patching, and build troubleshooting.
• Operate Artifactory, Xray, and Sonar Qube; support integrations.
• Maintain and extend Terraform infrastructure code through PR-based pipeline workflows.
• Manage Kubernetes workloads on EKS — Helm releases, storage, scaling, troubleshooting.
• Resolve production incidents across compute, storage, networking, identity, and certificate layers; support 300+ developers.
• Drive vulnerability remediation and patch cadence; produce runbooks and documentation.
• Build and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivity.
• Convert Jenkins shared-library pipelines to Git Hub Actions reusable workflows.
• Plan and execute phased repository migration waves, with validation and rollback.
• Configure enterprise identity, SSO/SCIM, and access governance in the target platform.
• Support developer onboarding and enablement; contribute to decommissioning plans.

Day-to-Day Responsibilities:

• Support internal teams and provide ongoing production and operational support.
• Investigate and resolve production issues, incident tickets, and operational requests.
• Work with new teams to onboard them onto the organization's development platforms and standards.
• Assist teams with adoption of CI/CD pipelines, Git Hub, and other development tooling.
• Collaborate closely with development teams to ensure proper setup and integration with platform services.
• Partner with the Application Security (App Sec) and Cybersecurity teams to ensure security policies, standards, and compliance requirements are followed.

Current Focus:

• Support and maintain the existing platform and operational environment.
• Work on continuous improvements related to platform reliability, development processes, and security practices.

Future

Roadmap:

• The team is planning significant consolidation and migration initiatives beginning later this year…