DevSecOps Engineer

Job Title: DevSecOps Engineer
Work Location-- Richmond, VA 23219 (Onsite-Hybrid. )
Contract duration: 6 Months
Must Have Skills:
• Strong hands-on experience in GitHub Enterprise Cloud / GHECD administration, including enterprise account setup, organization structure, repository governance, project structure, and branching strategy.
• Expertise in GitHub Actions CI/CD implementation, including workflow design, reusable pipeline templates, runner selection strategy, and validation across targeted technology stacks.
• Experience with GitHub-hosted and self-hosted runners, including Linux/Windows runners, OpenShift/ARO-based runner setup, Actions Runner Controller (ARC), runner lifecycle management, and autoscaling.
• Strong knowledge of DevSecOps and GitHub Advanced Security (GHAS), including code scanning, secret scanning, dependency review, and security policy enforcement.
• Experience in enterprise identity and access integration, including Okta SSO, SAML, MFA, SCIM provisioning, RBAC, role mapping, and access governance.
• Hands-on experience integrating GitHub with enterprise DevSecOps tools such as OpenShift, CyberArk Conjur, Sonatype Nexus, Tosca, qTest, Playwright, Argo CD, ServiceNow, and Jira.
• Strong understanding of monitoring, logging, alerting, and audit log streaming, including SIEM integration, Dynatrace/self-hosted runner monitoring, pipeline failure notifications, and ServiceNow ticket automation.

Nice to Have Skills:
• Experience in application onboarding and CI pipeline migration, including onboarding repositories to GHECD and recreating CI pipelines using GitHub Actions.
• Strong understanding of monitoring, logging, alerting, and audit log streaming, including SIEM integration, Dynatrace/self-hosted runner monitoring, pipeline failure notifications, and ServiceNow ticket automation.
• Experience in CI/CD standardization and enterprise-scale templatization, including creating reusable templates, validating templates across runner environments, and supporting enterprise rollout.
• Knowledge of performance and scalability validation for GitHub Actions runners, including runner performance, autoscaling behavior, and workload execution under load.
• Ability to define and support operating model, documentation, enablement, go-live support, license/user scaling approach, and production readiness validation for enterprise adoption.

Detailed Job Description:
• Strong hands-on experience in GitHub Enterprise Cloud / GHECD administration, including enterprise account setup, organization structure, repository governance, project structure, and branching strategy.
• Expertise in GitHub Actions CI/CD implementation, including workflow design, reusable pipeline templates, runner selection strategy, and validation across targeted technology stacks.
• Experience with GitHub-hosted and self-hosted runners, including Linux/Windows runners, OpenShift/ARO-based runner setup, Actions Runner Controller (ARC), runner lifecycle management, and autoscaling.
• Strong knowledge of DevSecOps and GitHub Advanced Security (GHAS), including code scanning, secret scanning, dependency review, and security policy enforcement.
• Experience in enterprise identity and access integration, including Okta SSO, SAML, MFA, SCIM provisioning, RBAC, role mapping, and access governance.
• Hands-on experience integrating GitHub with enterprise DevSecOps tools such as OpenShift, CyberArk Conjur, Sonatype Nexus, Tosca, qTest, Playwright, Argo CD, ServiceNow, and Jira.
• Ability to implement security, governance, and policy controls, including enterprise-wide governance, root-level policies, compliance standards, and audit controls.
• Experience in application onboarding and CI pipeline migration, including onboarding repositories to GHECD and recreating CI pipelines using GitHub Actions.
• Strong understanding of monitoring, logging, alerting, and audit log streaming, including SIEM integration, Dynatrace/self-hosted runner monitoring, pipeline failure notifications, and ServiceNow ticket automation.
• Experience in CI/CD standardization and enterprise-scale templatization, including creating reusable templates, validating templates across runner environments, and supporting enterprise rollout.
• Knowledge of performance and scalability validation for GitHub Actions runners, including runner performance, autoscaling behavior, and workload execution under load.
• Ability to define and support operating model, documentation, enablement, go-live support, license/user scaling approach, and production readiness validation for enterprise adoption.

Minimum Years of Experience:
• 12 years

Certifications Needed:
• None