AWS DevSecOps Engineer_Github

Position

Responsibilities

• Work on end-to-end migration of large-scale repositories from AWS CodeCommit and Gitlab to GitHub Enterprise, ensuring history preservation, access control mapping, and zero data loss.
• Establish and enforce enterprise Git standards, including branching strategies, commit policies, rebasing workflows, release/version management, and tagging best practices.
• Collaborate with stakeholders to define migration playbooks and ensure smooth adoption across development teams.
• Redesign and integrate AWS CodePipeline workflows to work seamlessly with GitHub repositories and GitHub Actions.
• Implement hybrid runner strategies (GitHub-hosted & AWS self-hosted) for performance and scalability.
• Define multi-stage approval workflows, security scans, and policy enforcement within pipelines.
• Develop and manage infrastructure using Terraform and AWS CloudFormation, following modular, reusable, and secure coding practices.
• Automate CI/CD and DevSecOps processes with Python (in-depth) for API integrations, AWS SDKs (boto3), and orchestration scripts.
• Build automation scripts in Shell for migration tooling, pipeline triggers, and system integrations.
• Implement monitoring and observability with CloudWatch/ New Relic for pipelines, GitHub Actions, and migration jobs.
• Ensure compliance with enterprise DevSecOps frameworks, including secure coding, pipeline hardening, and access control enforcement.
  

Qualifications And Experience

• Bachelor’s degree in software engineering, Computer Science, Computer Engineering, or related Engineering discipline; master’s degree or higher from IIT/IISc or other premier institutes preferred.
• 5+ years of experience in technical architecture including 3+ years of experience in AWS and GitHub Enterprise.
  

Skills And Abilities Required

• Expertise in scripting/development using Python & JavaScript, AWS SDKs (boto3), GitHub SDK, REST APIs while following development best practices.
• Expertise in Terraform & CloudFormation , Jinja for enterprise IaC.
• Experience with AWS Services like STS, IAM, Lambda, S3, CloudWatch, CodePipeline, CodeBuild, Secrets Manager, EC2, ECS, Docker, DynamoDB, RDS, Cloudfront , Codeartifact, Cognito, SAM etc.
• Experience with GitHub Actions, self-hosted runners on AWS and Github hosted runners
• Working knowledge of MySql and Postgres Databases
• Cross-account roles, least-privilege policies, secure automation using IAM, OIDC,SCIM.
• CI/CD security scanning, compliance enforcement, observability
• Secure pipelines with approvals, static analysis (SonarQube, Sonatype), artifact validation
• Experience in GitHub Enterprise administration: branch protections, security rules, workflow policies and configuration.
• Experience GitHub Apps, OAuth Apps, Github Actions for Automation and access management on GitHub .
• Knowledge of building and deploying codebase in Nodejs, python, Golang, React Native on AWS Serveless Infrastructure
• Good Communication and documentation skills.
• Can-do positive attitude, always looking to accelerate development.
• Driven; commit to high standards of performance and demonstrate personal ownership for getting the job done.
• Innovative and entrepreneurial attitude; stays up to speed on all the latest technologies and industry trends; healthy curiosity to evaluate, understand and utilize new technologies.
  

Good To Have

• Terraform Certification
• AWS Professional Certification
• Development experience in python
• Familiarity with ELK, ECS, Jenkins, Bitrise, Jira
  

Location:

Time Type

Job Category