Senior GitHub Platform Engineer

We are looking for a Senior GitHub Platform Engineer to assess, design, and implement security improvements across a large GitHub Enterprise environment. This hands-on role covers access governance, repository controls, branch and secret protection, Personal Access Token policies, software supply-chain security, platform automation, and auditability, with a focus on practical implementation rather than analysis or proofs of concept alone.

Responsibilities

• Design and implement GitHub Enterprise security controls at scale
• Automate configuration, compliance checks, reporting and remediation processes
• Strengthen identity, access and permission management across the platform
• Implement repository rulesets, branch protection and ownership controls
• Configure secret scanning, push protection and incident response workflows
• Improve Personal Access Token, GitHub App and deploy-key governance
• Secure GitHub Actions, runners, dependencies and package workflows
• Analyze audit logs and platform data to measure control coverage
• Produce maintainable code, tests, runbooks and technical documentation
• Map GitHub Enterprise architecture, configurations, integrations, and security controls in collaboration with the team
• Coordinate migrations, remediation, and exception handling during rollout phases
• Transfer knowledge to permanent engineering and operations teams

Requirements

• 5+ years of experience in platform engineering, DevOps, or security engineering roles
• Proven hands-on experience securing GitHub Enterprise environments at scale
• Expertise in GitHub and GitHub Actions
• Experience designing and implementing access governance, repository controls, and branch protection policies
• Skills in automating configuration, compliance checks, and remediation workflows
• Background in software supply-chain security and secret management practices
• Understanding of audit log analysis and control coverage measurement
• Capability to produce clear technical documentation, runbooks, and maintainable automation code

Nice to have

• Knowledge of Security IAM
• Background in Site Reliability Engineering
• Familiarity with Terraform
• Proficiency in TypeScript