What are the responsibilities and job description for the Enterprise DevSecOps Platform position at Expert Technology Services?
Job Summary (List Format):
- Serve as a DevSecOps Platform Engineer supporting 300 developers across the enterprise.
- Quickly become productive on the existing self-hosted DevSecOps toolchain (primarily AWS EKS-based).
- Administer and operate core DevSecOps tools: CloudBees CI (Jenkins), GitHub Enterprise Server, JFrog Artifactory & Xray, SonarQube, Jira/Confluence Data Center.
- Manage and extend infrastructure using AWS services (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS), Terraform, Helm, and Docker.
- Oversee Kubernetes workloads on EKS, including Helm releases, scaling, and troubleshooting.
- Maintain platform security: drive vulnerability remediation, patch cadence, and produce runbooks/documentation.
- Troubleshoot and resolve production incidents across compute, storage, networking, identity, and certificates.
- Support and integrate pipeline security tools (SAST, SCA, SBOM, container scanning, quality gates).
- Contribute to the migration and consolidation of platforms: move from self-hosted tools to SaaS-based solutions (e.g., transition from CloudBees CI to GitHub Actions, and Atlassian Data Center to Atlassian Cloud).
- Build and operate Actions Runner Controller (ARC) self-hosted GitHub Actions runners on EKS.
- Convert Jenkins pipelines to GitHub Actions reusable workflows.
- Plan and execute large-scale repository migrations using GitHub Enterprise Importer, with validation and rollback procedures.
- Configure and manage enterprise identity, SSO/SCIM, and access governance for the new platform.
- Support onboarding and enablement for developers during migration phases.
- Produce and maintain high-quality documentation and participate in the on-call rotation.
- Work independently with broad ownership and strong documentation discipline.
Required Qualifications:
- Bachelor’s degree required.
- 7 years of experience in DevOps/DevSecOps/platform engineering.
- Hands-on administration and pipeline development for enterprise CI platforms (preferably Jenkins/CloudBees).
- Production-level experience with GitHub Actions (including reusable workflows and runners).
- Deep expertise with AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and Kubernetes.
- Advanced Terraform (modules, state management, pipeline-driven workflows), Helm, and Docker skills.
- Strong Linux administration and core systems knowledge (networking, certificates/TLS, identity management).
- Scripting proficiency in Python, Bash, and Groovy.
- Ability to work independently and take broad ownership.
Preferred Qualifications:
- Experience with GitHub Enterprise Cloud/EMU migrations and Jenkins-to-GitHub Actions conversions.
- Hands-on experience with GitHub Enterprise Importer and Actions Runner Controller (ARC).
- Experience migrating Artifactory/Xray, SonarQube, or Atlassian Cloud.
- AWS certification (DevOps Engineer – Professional or Solutions Architect).
- Background in regulated enterprise environments with formal change management processes.
- Serve as a DevSecOps Platform Engineer supporting 300 developers across the enterprise.
- Quickly become productive on the existing self-hosted DevSecOps toolchain (primarily AWS EKS-based).
- Administer and operate core DevSecOps tools: CloudBees CI (Jenkins), GitHub Enterprise Server, JFrog Artifactory & Xray, SonarQube, Jira/Confluence Data Center.
- Manage and extend infrastructure using AWS services (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS), Terraform, Helm, and Docker.
- Oversee Kubernetes workloads on EKS, including Helm releases, scaling, and troubleshooting.
- Maintain platform security: drive vulnerability remediation, patch cadence, and produce runbooks/documentation.
- Troubleshoot and resolve production incidents across compute, storage, networking, identity, and certificates.
- Support and integrate pipeline security tools (SAST, SCA, SBOM, container scanning, quality gates).
- Contribute to the migration and consolidation of platforms: move from self-hosted tools to SaaS-based solutions (e.g., transition from CloudBees CI to GitHub Actions, and Atlassian Data Center to Atlassian Cloud).
- Build and operate Actions Runner Controller (ARC) self-hosted GitHub Actions runners on EKS.
- Convert Jenkins pipelines to GitHub Actions reusable workflows.
- Plan and execute large-scale repository migrations using GitHub Enterprise Importer, with validation and rollback procedures.
- Configure and manage enterprise identity, SSO/SCIM, and access governance for the new platform.
- Support onboarding and enablement for developers during migration phases.
- Produce and maintain high-quality documentation and participate in the on-call rotation.
- Work independently with broad ownership and strong documentation discipline.
Required Qualifications:
- Bachelor’s degree required.
- 7 years of experience in DevOps/DevSecOps/platform engineering.
- Hands-on administration and pipeline development for enterprise CI platforms (preferably Jenkins/CloudBees).
- Production-level experience with GitHub Actions (including reusable workflows and runners).
- Deep expertise with AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and Kubernetes.
- Advanced Terraform (modules, state management, pipeline-driven workflows), Helm, and Docker skills.
- Strong Linux administration and core systems knowledge (networking, certificates/TLS, identity management).
- Scripting proficiency in Python, Bash, and Groovy.
- Ability to work independently and take broad ownership.
Preferred Qualifications:
- Experience with GitHub Enterprise Cloud/EMU migrations and Jenkins-to-GitHub Actions conversions.
- Hands-on experience with GitHub Enterprise Importer and Actions Runner Controller (ARC).
- Experience migrating Artifactory/Xray, SonarQube, or Atlassian Cloud.
- AWS certification (DevOps Engineer – Professional or Solutions Architect).
- Background in regulated enterprise environments with formal change management processes.