Senior Platform/Devops Architect

Xpt Software Australia Pty Ltd; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

XPT Software Australia Pty Ltd is seeking a Senior Platform/DevOps Architect to own the target platform and design the GitHub Enterprise Cloud landing zone and reusable workflow library. You will set governance, build the golden-path for migrations, and guide integration with enterprise tooling across secure environments.

You will lead design work on runners, secrets management, and ADCs, while ensuring architectural soundness and a smooth handover to client BAU.

Qualifications

• 12+ years platform/DevOps engineering experience.
• 4+ years deep GitHub Actions experience.
• Jenkins expertise: declarative/scripted pipelines, shared libraries, multibranch.
• Enterprise CI/CD architecture with policy-as-code.
• GHAS or equivalent AppSec tooling integration; Terraform for provisioning.

Responsibilities

• Design the GitHub Enterprise Cloud foundation: org/repo topology, SSO/SCIM integration, Rulesets, branch protection, CODEOWNERS strategy, and governance.
• Author and version reusable GitHub Actions workflows per archetype with drift detection.
• Design self-hosted runner topology and integrate enterprise tooling (GHAS, Snyk, Sonar, Vault, Artifactory).
• Define Jenkins→Actions conversion standards: secrets re-binding, shared libraries, trigger mapping, artefact handling.
• Review agent-generated PRs for architectural soundness and handover to client BAU.

Skills

GitHub Actions

Jenkins

CI/CD Architecture

Secrets Management

ADR & Runbooks

Architecture Review

Tools

Bitbucket Server

Snyk

SonarQube

Vault

CyberArk

Artifactory

Job description

Senior Platform/DevOps Architect XPT Software Australia Pty Ltd•Sydney, NSW, au

Job Description

Role summary:

Technical owner of the target platform. Designs and builds the GitHub Enterprise Cloud landing zone and the golden-path reusable workflow library that every migrated repository consumes — the standardisation layer the whole migration lands on.

Key responsibilities:

• Design the GHEC foundation: org/repo topology, SSO/SCIM identity integration, Rulesets, branch protection, CODEOWNERS strategy, and marketplace/actions allowlist governance.
  


• Author and version the golden-path reusable GitHub Actions workflows per archetype (Java/Maven, Node/TS, Python, container, Terraform, etc.), consumed by reference (uses: org/repo@version) — never copied — with drift detection.
  


• Design the self-hosted runner topology (residency-aware, Azure/AWS network routes) and integrate enterprise tooling: GHAS (secret/code scanning), Snyk/Sonar-class scanners, Vault/CyberArk, Artifactory.
  


• Define the Jenkins→Actions conversion standards the AI agents implement: secrets re-binding, shared-library equivalence, trigger mapping, artefact handling (including Git LFS / artefact-store strategy for large in-repo binaries).
  


• Act as design authority on the bespoke long-tail — the complex pipelines agents can't fully convert — and review agent-generated PRs for architectural soundness.
  


• Partner with client platform/security teams; prepare the platform handover to client BAU.
  

Required skills & experience:

• 12+ years platform/DevOps engineering; 4+ years deep GitHub Actions (reusable workflows, composite actions, self-hosted runners at scale).
  


• Expert Jenkins internals: declarative and scripted pipelines, shared libraries, multibranch, trigger graphs — and Bitbucket Server administration.
  


• Enterprise CI/CD architecture: promotion models, environment strategy, secrets management, policy-as-code.
  


• GHAS or equivalent AppSec tooling integration; IaC (Terraform) for platform provisioning.
  


• Strong written design skills — ADRs, standards, runbooks that survive handover.
  

Desirable:

GEI migration experience; Kubernetes; APRA-regulated environment exposure; contribution to internal developer platforms / golden-path programmes.