Github Platform Consultant

Title- Github Platfrom Consultant
Duration- 6 months
Location- Remote

About the Role:
Company is seeking a contract Principal Technical Business Architect to lead the establishment of an enterprise-wide GitHub governance framework. You will coordinate across five major stakeholder groups to create, document, and implement standardized policies for approximately 50-60 GitHub organizations serving approximately 5,000 users. This is a governance and coordination role - not a full development role.

What You'll Do

• Drive the GitHub Governance Initiative through a phased roadmap: from visibility and baseline (org audit, identity mapping, policy definition) through automation and enforcement.
• Coordinate across stakeholder groups including InfoSec, Product Security (ProdSec/PSCE), IT Identity & Access Management (IT-IAM), Platform Cloud Operations (PCO/Ops), and ALM/DEP.
• Define enterprise-wide policies and standards for GitHub organization management, including security settings (2FA, secret scanning, branch protection), access controls, and license optimization.
• Create "Policy as Code" specifications (YAML/Rego format) codifying MUST/SHOULD/MAY security requirements in collaboration with InfoSec.
• Design and implement scalable, automated governance frameworks - including standardized processes for onboarding new organizations under the Enterprise account, automated policy application to new orgs, and self-service workflows that scale across the enterprise without manual intervention.
• Own all compliance deliverables including Enterprise Security Standards (ESS), Privacy Impact Assessments (PIA), and Security Impact Assessments (SIA) for the GitHub platform and related governance tooling.
• Develop governance documentation including onboarding guides, decision frameworks (when to use GitHub vs. GitLab), and compliance documentation for IBM audit requirements.
• Manage the organizational consolidation of fragmented GitHub orgs into the Enterprise account, eliminating shadow billing and increasing visibility.
• Facilitate identity mapping between GitHub users and company employees, supporting SCIM/IBM Verify integration.
• Lead change management to roll out standards in phases without disrupting developer workflows, including communication plans and override mechanisms for special cases (e.g., community-managed orgs, Ansible).
• Track and report on stakeholder commitments, resource allocation, and progress against the phased roadmap.

Required Qualifications

• 5 years of experience in technical program management, IT governance, or a similar coordination-heavy technical role.
• Deep working knowledge of GitHub Enterprise (organizations, teams, permissions, security settings, Enterprise accounts, GHAS) or equivalent experience with GitLab at enterprise scale.
• Understanding of SCM security best practices: 2FA enforcement, secret scanning, branch protection rules, token management, SCIM provisioning.
• Experience creating governance policies and standards for large engineering organizations (1,000 developers).
• Proven ability to coordinate across 4 stakeholder groups with competing priorities and drive consensus.
• Knowledge of Policy as Code concepts (OPA/Rego, YAML-based policy specs) - you need to be able to write the code.
• Strong documentation skills - ability to create clear, actionable policy documents and process guides.
• Experience with change management in large enterprises - phased rollouts, communication plans, exception handling.
• Experience with enterprise compliance processes - ESS (Enterprise Security Standards), PIA (Privacy Impact Assessments), and SIA (Security Impact Assessments) or equivalent security and privacy compliance frameworks.
• Preferred Qualifications
• Experience with identity and access management (IAM) integration, particularly SCIM, SSO, and identity governance platforms (IBM Verify, Okta, etc.).
• Background in compliance/audit environments (IBM audit, SOC2, or similar).
• Familiarity with compliance automation tools (ComplyTime or similar).
• Experience in organizations that manage both upstream open-source and downstream enterprise source control workflows.
• Understanding of GitHub Advanced Security and other paid features.
• IBM enterprise environment experience is a strong plus.