AWS Devops

Role

AWS DevSecOps GITHUB

Key Responsibilities*

Below are the specifics of the role:

• Design, implement, and maintain GitHub Actions workflows for CI/CD across multiple repositories and environments (dev, staging, production)
• Build and manage self-hosted ARC (Actions Runner Controller) runners on Kubernetes (EKS), including runner scaling, pod identity, and network policies
• Integrate GitHub Advanced Security (GHAS) capabilities — secret scanning, push protection, code scanning (CodeQL), and dependency review — into developer workflows
• Migrate legacy CI/CD pipelines (Jenkins, TeamCity, CodePipeline/CodeBuild) to native GitHub Actions
• Enforce branch protection rules, required status checks, environment gates, and deployment approvals
• Develop reusable composite actions and reusable workflows to standardize pipeline patterns across teams
• Collaborate with InfoSec to embed SAST, DAST, SCA, and secrets hygiene into every pipeline stage
• Maintain GitHub Enterprise (EMU or GHEC) organization settings, team provisioning via SCIM/Okta, and repository governance policies
• Instrument pipelines with audit logging, metrics, and alerting (Splunk, CloudWatch, Datadog)
• Support infrastructure-as-code deployments via GitHub Actions (Terraform, CloudFormation, CDK)