Pathway Platform Engineers

Pathway Platform Engineers

We are seeking a senior Pathway Platform Engineer to own and evolve the CI/CD and environment lifecycle platform that enables safe, auditable application delivery across the enterprise. This role focuses on designing, building, and operating pipeline templates, infrastructure-as-code, policy-as-code governance, and software supply chain protections using GitHub and/or Azure DevOps, Terraform, and policy tooling.

This is an opportunity to lead technical decisions, drive adoption of secure delivery practices, and integrate delivery platforms with enterprise operational processes such as ServiceNow and CAB automation. The role emphasizes automation, observability, reliability, and developer enablement to support large-scale, compliant releases.

Responsibilities

• Own the CI/CD platform for application delivery: design reusable pipeline templates, secure defaults, quality gates, and developer enablement.
• Build and operate infrastructure pipelines for environment lifecycle management, including provisioning, promotion, drift detection, and controlled rollouts.
• Establish and maintain delivery governance with policy catalogs, change control, exception workflows, traceability, and audit evidence.
• Implement automated compliance and security checks in pipelines using policy-as-code and scanning, and continuously improve signal quality.
• Enable safe releases at scale through zero-downtime deployment patterns, progressive delivery, feature flag integration, and standardized rollback and verification practices.
• Automate change management integrations with ServiceNow and CAB workflows to reduce manual overhead while preserving controls and traceability.
• Operate and evolve build infrastructure (runners/agents and build pools): manage performance, reliability, hardening, patching, and cost awareness.
• Implement software supply chain protections including artifact provenance/attestation, signing/verification, and private artifact repository patterns.
• Integrate DevSecOps tooling into delivery flows and enable teams to remediate findings through reporting, triage, and automation.
• Build internal automation (apps/bots) that simplify developer workflows and enforce standards with minimal friction.
• Provide standardized automated testing capabilities (acceptance, performance, resiliency/chaos, operational acceptance tests) as pipeline stages and quality gates.
• Enable observability onboarding and standards with instrumentation guidance, dashboards-as-code, and alerting in partnership with solution teams.
• Partner with SRE and operations to improve reliability practices, availability policies, incident response, and on-call readiness.

Requirements

• 6+ years designing, building, and operating CI/CD platforms for application delivery in enterprise environments (GitHub and/or Azure DevOps).
• 4+ years delivering infrastructure-as-code and environment lifecycle automation using Terraform, including reusable modules and promotion across environments.
• Proven track record implementing pipeline governance: policy-as-code, change control, exception handling, and producing audit-ready evidence.
• Hands-on experience with software supply chain controls, including artifact provenance/attestation, signing/verification, and private artifact repositories.
• Experience integrating delivery platforms with enterprise operational processes, including ServiceNow change automation and CAB integration.
• Strong automation and troubleshooting skills using Bash, PowerShell, and Python; able to independently diagnose pipeline, runner/agent, and environment failures.
• Demonstrated ability to lead technical decisions and drive adoption across teams through documentation, standards, and stakeholder alignment.
• Experience with GitHub Actions (reusable workflows, branch protections, required checks, CODEOWNERS) and runner/build pool operations, and/or Azure DevOps pipelines, agent pools, environments, and approvals.
• Experience implementing policy-as-code (Kyverno and/or Sentinel) and enforcement patterns within pipelines.
• Experience integrating DevSecOps tooling such as SonarQube and other scanning tools into delivery workflows.
• Experience with observability onboarding and tooling such as AppInsights and Dynatrace, including dashboards-as-code and alerting standards.
• Familiarity with reliability practices including availability policies, incident response, and on-call readiness (e.g., PagerDuty).

Nice to Have

• Experience with CAB process automation.
• Experience building GitHub artifact attestation infrastructure.
• Experience managing Sentinel policy catalogs and change control.
• Experience implementing acceptance and performance test infrastructure.
• Experience building policy bots or internal automation (e.g., Probot-style apps).
• Experience with LaunchDarkly or Flagger for progressive delivery.