GitHub Enterprise Platform Administrator / Engineer
Role details
Job location
Tech stack
Job description
We are seeking an experienced GitHub Enterprise Platform Engineer / Administrator to own and manage our enterprise GitHub platform. This role is responsible for GitHub Enterprise administration, governance, security, automation, developer enablement, and CI/CD platform engineering across the organization., * Administer GitHub Enterprise Cloud (Enterprise Managed Users - EMU) or GitHub Enterprise Server
- Manage enterprise organizations, repositories, teams, and enterprise-wide policies.
- Configure and enforce organization rulesets, branch protection rules, and required status checks.
- Implement repository governance using templates, GitHub repositories, CODEOWNERS, and repository properties.
- Manage SAML/SCIM authentication and identity integration with Microsoft Entra ID or Okta
- Automate user and team provisioning.
- Implement policy-as-code using Terraform, GitHub APIs, or similar automation tools.
GitHub Actions Platform Engineering
- Deploy, administer, and support GitHub Actions at enterprise scale.
- Configure and manage self-hosted runners.
- Deploy and maintain Actions Runner Controller (ARC) on Kubernetes.
- Manage runner groups, larger hosted runners, and enterprise usage governance.
- Build and maintain reusable workflows and composite GitHub Actions.
- Develop versioning and release strategies for shared workflow libraries.
- Secure GitHub Actions by implementing: OIDC authentication, SHA-pinned actions, Allowed Actions policies, Deployment environments, Required reviewers, Deployment protection rules.
GitHub Advanced Security (GHAS)
- Administer GitHub Advanced Security across enterprise organizations.
- Configure and maintain: CodeQL, Secret Scanning, Push Protection, Dependabot.
- Develop custom CodeQL queries.
- Tune security findings to reduce false positives.
- Build enterprise security dashboards and reporting.
- Drive remediation campaigns and security compliance.
- Integrate GHAS findings into enterprise security tools and CI/CD pipelines.
Automation & Platform Integrations
- Develop automation using GitHub REST and GraphQL APIs.
- Build GitHub Apps and webhook-driven automation.
- Develop tooling using GitHub CLI (gh)
Migration & Modernization
- Lead enterprise migrations from: GitLab, Bitbucket, Azure DevOps, Jenkins
- Utilize GitHub Enterprise Importer (GEI) and gh gei.
- Modernize legacy CI/CD pipelines into GitHub Actions
- Minimize disruption during migration activities.
Developer Experience & Platform Engineering
- Implement GitHub Copilot governance and enterprise adoption.
- Build self-service developer platforms.
- Support Internal Developer Platforms (IDP)
- Integrate GitHub with Backstage or similar developer portals.
- Define and report platform metrics including: DORA metrics, GitHub Actions usage, Audit logs, Security posture, Platform adoption.
Requirements
The ideal candidate will have extensive hands-on experience administering GitHub Enterprise Cloud (EMU) or GitHub Enterprise Server, implementing enterprise governance, managing GitHub Actions infrastructure, GitHub Advanced Security (GHAS), and driving platform modernization initiatives., * 3+ years of hands-on GitHub Enterprise administration.
- Experience with GitHub Enterprise Cloud (EMU) or GitHub Enterprise Server.
- Strong knowledge of GitHub Actions platform administration.
- Experience with GitHub Advanced Security (GHAS).
- Experience with GitHub REST API and GraphQL API.
- Strong scripting and automation experience.
- Experience with Terraform (GitHub Provider preferred).
- Experience integrating GitHub with Microsoft Entra ID or Okta.
- Experience managing SAML/SCIM authentication.
- Experience with Kubernetes and Actions Runner Controller (ARC).
- Experience implementing enterprise GitHub governance.
- Experience leading GitHub migration initiatives.
- Strong understanding of DevSecOps and software supply chain security.
Preferred Qualifications
- Experience with GitHub Copilot Enterprise.
- Experience building Internal Developer Platforms (IDP).
- Experience with Backstage.
- Experience implementing policy-as-code.
- Familiarity with GitHub billing and usage management for: GitHub Actions, GitHub Packages, GitHub Advanced Security.
- Experience defining DORA metrics and engineering productivity reporting.