DevSecOps Engineer

Experience with GitHub-hosted and self-hosted runners, including Linux/Windows runners, OpenShift/ARO-based runner setup, Actions Runner Controller (ARC), runner lifecycle management, and autoscaling. Strong understanding of monitoring, logging, alerting, and audit log streaming, including SIEM integration, Dynatrace/self-hosted runner monitoring, pipeline failure notifications, and ServiceNow ticket automation.

Job Title: DevSecOps Engineer
Work Location-- Richmond, VA 23219 (Onsite-Hybrid. )
Contract duration: 6 Months
Must Have Skills:
Strong hands-on experience in GitHub Enterprise Cloud / GHECD administration, including enterprise account setup, organization structure, repository governance, project structure, and branching strategy.
Expertise in GitHub Actions CI/CD implementation, including workflow design, reusable pipeline templates, runner selection strategy, and validation across targeted technology stacks.
Experience with GitHub-hosted and self-hosted runners, including Linux/Windows runners, OpenShift/ARO-based runner setup, Actions Runner Controller (ARC), runner lifecycle management, and autoscaling.
Strong knowledge of DevSecOps and GitHub Advanced Security (GHAS), including code scanning, secret scanning, dependency review, and security policy enforcement.
Experience in enterprise identity and access integration, including Okta SSO, SAML, MFA, SCIM provisioning, RBAC, role mapping, and access governance.
Hands-on experience integrating GitHub with enterprise DevSecOps tools such as OpenShift, CyberArk Conjur, Sonatype Nexus, Tosca, qTest, Playwright, Argo CD, ServiceNow, and Jira.
Strong understanding of monitoring, logging, alerting, and audit log streaming, including SIEM integration, Dynatrace/self-hosted runner monitoring, pipeline failure notifications, and ServiceNow ticket automation.

Nice to Have Skills:
Experience in application onboarding and CI pipeline migration, including onboarding repositories to GHECD and recreating CI pipelines using GitHub Actions.
Strong understanding of monitoring, logging, alerting, and audit log streaming, including SIEM integration, Dynatrace/self-hosted runner monitoring, pipeline failure notifications, and ServiceNow ticket automation.
Experience in CI/CD standardization and enterprise-scale templatization, including creating reusable templates, validating templates across runner environments, and supporting enterprise rollout.
Knowledge of performance and scalability validation for GitHub Actions runners, including runner performance, autoscaling behavior, and workload execution under load.
Ability to define and support operating model, documentation, enablement, go-live support, license/user scaling approach, and production readiness validation for enterprise adoption.

Detailed Job Description:
Strong hands-on experience in GitHub Enterprise Cloud / GHECD administration, including enterprise account setup, organization structure, repository governance, project structure, and branching strategy.
Expertise in GitHub Actions CI/CD implementation, including workflow design, reusable pipeline templates, runner selection strategy, and validation across targeted technology stacks.
Experience with GitHub-hosted and self-hosted runners, including Linux/Windows runners, OpenShift/ARO-based runner setup, Actions Runner Controller (ARC), runner lifecycle management, and autoscaling.
Strong knowledge of DevSecOps and GitHub Advanced Security (GHAS), including code scanning, secret scanning, dependency review, and security policy enforcement.
Experience in enterprise identity and access integration, including Okta SSO, SAML, MFA, SCIM provisioning, RBAC, role mapping, and access governance.
Hands-on experience integrating GitHub with enterprise DevSecOps tools such as OpenShift, CyberArk Conjur, Sonatype Nexus, Tosca, qTest, Playwright, Argo CD, ServiceNow, and Jira.
Ability to implement security, governance, and policy controls, including enterprise-wide governance, root-level policies, compliance standards, and audit controls.
Experience in application onboarding and CI pipeline migration, including onboarding repositories to GHECD and recreating CI pipelines using GitHub Actions.
Strong understanding of monitoring, logging, alerting, and audit log streaming, including SIEM integration, Dynatrace/self-hosted runner monitoring, pipeline failure notifications, and ServiceNow ticket automation.
Experience in CI/CD standardization and enterprise-scale templatization, including creating reusable templates, validating templates across runner environments, and supporting enterprise rollout.
Knowledge of performance and scalability validation for GitHub Actions runners, including runner performance, autoscaling behavior, and workload execution under load.
Ability to define and support operating model, documentation, enablement, go-live support, license/user scaling approach, and production readiness validation for enterprise adoption.

Minimum Years of Experience:
12 years

Certifications Needed:
None