About this role
UAN/Form 26as/Form 16 is mandatory for BGV
Senior DevSecOps / Platform Engineer
10+ Years
Remote (Candidate should be open to visit clien't office for onboarding)
Key Responsibilities
Platform architecture: Define and own the target architecture for repository governance, branch protection, and security-control enforcement across multiple GitHub organizations and Azure DevOps projects.
GitHub & ADO security configuration: Design and oversee implementation of GitHub security configuration (e.g. GitHub Advanced Security enablement, branch protection rulesets, organization-level policy) and equivalent Azure DevOps governance controls (branch policies, pipeline security, org-level settings).
Technical review & escalation: Review and approve automation and scripts built by the two engineering team members before they go to production; be the technical escalation point for anything ambiguous or high-risk.
Governance & stakeholder engagement: Partner directly with security/CISO stakeholders and the platform lead to align remediation approach with audit commitments and sign off on policy before rollout.
Cross-team coordination: Act as the primary technical liaison for a parallel platform team (ADO dashboarding, compliance tooling), ensuring the two workstreams stay consistent.
Onboarding under time pressure: Bring the team up to speed on existing platform context quickly, given the engagement follows a reorganization with limited handover.
Must-Have (Gating Criteria — vendors should not submit candidates missing any of these)
GitHub platform expertise (mandatory): Deep, hands-on administration experience with GitHub Enterprise Cloud at an organizational level — security configuration, policy enforcement, and governance (not just day-to-day repo use). This is mandatory regardless of overall years of experience.
Azure DevOps expertise (mandatory): Solid, demonstrable experience administering Azure DevOps at org/project level — branch policies, pipeline governance, security settings. This is mandatory regardless of overall years of experience.
Scripting / automation (mandatory): Strong Python skills for building and reviewing automation — monitoring scripts, policy-enforcement tooling, reporting.
Experience: 10+ years in platform/DevOps/DevSecOps engineering, including genuine architecture-level ownership, not just execution.
Architectural & governance judgment: Able to translate security/compliance requirements into a technical design, and defend that design to security and audit stakeholders.
Preferred
Comfortable designing CI/CD and platform automation end-to-end (GitHub Actions and/or Azure Pipelines).
Experience leading or reviewing the work of 1-2 other engineers, even informally.
Prior experience supporting an internal or external audit remediation / CAPA program.
Experience in a large, regulated enterprise (pharma, financial services, or similar).
Familiarity with SAST/SCA/secrets-scanning tooling beyond GitHub Advanced Security.