Enterprise DevSecOps Platform

Blue Ribbon Global Technologies; St. Louis (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Blue Ribbon Global Technologies in St. Louis, MO seeks an experienced DevSecOps platform engineer to join the platform team that supports enterprise CI/CD for 300+ developers.

You will own day-to-day operations of CloudBees CI on EKS, GitHub Enterprise Server/Actions, Artifactory, SonarQube, and related tooling, and drive migrations to GitHub Enterprise Cloud. You will implement secure, scalable infrastructure with Terraform, Helm, Docker, and Kubernetes, while coordinating identity, access

Qualifications

• Bachelor's degree is required.
• 7+ years in DevOps / DevSecOps / platform engineering.
• Hands-on admin of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable libraries.
• Practical GitHub Actions experience - workflows, reusable workflows, runners, secrets.
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes.
• Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker.
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates.
• Core systems fundamentals: Linux administration, networking, TLS, identity, scripting.
• Ability to work independently with broad ownership; on-call rotation.

Responsibilities

• Operate CloudBees CI on EKS and GitHub Enterprise Server - lifecycle, upgrades, access governance, patching, and build troubleshooting.
• Operate Artifactory, Xray, and SonarQube; support integrations.
• Maintain Terraform infrastructure code through PR-based pipeline workflows.
• Manage Kubernetes workloads on EKS - Helm releases, storage, scaling, troubleshooting.
• Resolve production incidents across compute, storage, networking, identity, and certificate layers; support 300+ developers.
• Drive vulnerability remediation and patch cadence; produce runbooks and documentation.
• Build and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivity.
• Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows.
• Plan and execute phased repository migration waves, with validation and rollback.
• Configure enterprise identity, SSO/SCIM, and access governance in the target platform.
• Support developer onboarding and enablement; contribute to decommissioning plans.

Skills

DevSecOps

Platform engineering

AWS (EKS)

Kubernetes

Terraform

GitHub Actions

Jenkins/CloudBees

Scripting: Python

Scripting: Bash

Scripting: Groovy

On-call rotation

Education

Bachelor's degree

Tools

GitHub Enterprise Server

GitHub Enterprise Cloud

CloudBees CI

Artifactory

Xray

SonarQube

Jira/Confluence Data Center

Terraform

Helm

Docker

Prometheus/Grafana

Job description

Summary

We are seeking an experienced DevSecOps platform engineer to join the DevSecOps platform team that owns the enterprise DevSecOps toolchain supporting the full software development lifecycle for 300+ developers.

Environment

Current :

GitHub Enterprise Server, CloudBees CI (Jenkins) on EKS, JFrog Artifactory & Xray, SonarQube, Jira/Confluence Data Center on EKS; AWS (EKS, EC2, ECS, VPC, IAM, S3, Route 53, KMS, EFS, RDS); Terraform; Helm; Docker; Prometheus/Grafana; Azure AD/SSO

Target :

GitHub Enterprise Cloud (EMU) with Azure AD federation and SCIM GitHub Actions replacing CloudBees CI Actions Runner Controller (ARC) self-hosted runners on EKS repository migration at scale via GitHub Enterprise Importer consolidated code security scanning Atlassian Cloud

Responsibilities

Operate the current platform :-

• Administer CloudBees CI on EKS and GitHub Enterprise Server - lifecycle, upgrades, access governance, patching, and build troubleshooting
• Operate Artifactory, Xray, and SonarQube; support integrations
• Maintain and extend Terraform infrastructure code through PR-based pipeline workflows
• Manage Kubernetes workloads on EKS - Helm releases, storage, scaling, troubleshooting
• Resolve production incidents across compute, storage, networking, identity, and certificate layers; support 300+ developers
• Drive vulnerability remediation and patch cadence; produce runbooks and documentation

Drive consolidation and migration :-

• Build and operate ARC self-hosted runners on EKS, including hardening and private VPC connectivity
• Convert Jenkins shared-library pipelines to GitHub Actions reusable workflows
• Plan and execute phased repository migration waves, with validation and rollback
• Configure enterprise identity, SSO/SCIM, and access governance in the target platform
• Support developer onboarding and enablement; contribute to decommissioning plans

Required Qualifications

• Bachelor's degree is required
• 7+ years in DevOps / DevSecOps / platform engineering
• Hands-on administration of an enterprise CI platform (Jenkins/CloudBees preferred) and pipeline development using shared/reusable libraries
• Practical GitHub Actions experience - workflows, reusable workflows, runners, secrets
• Strong hands-on AWS (EKS, EC2, VPC, IAM, S3, Route 53, KMS, EFS) and production Kubernetes
• Terraform at production scale - modules, state management, multi-environment, pipeline-driven plan/apply; plus Helm and Docker
• Pipeline security tooling: SAST, SCA, SBOM, container scanning, quality gates
• Core systems fundamentals (non-negotiable) :-
• Linux administration and troubleshooting
• Networking - TCP/IP, DNS, routing, firewalls, load balancing, proxies, VPN/Transit Gateway, packet-level diagnostics
• Certificates and TLS - PKI, issuance, and renewal, truststores, mTLS
• Identity - LDAP, Azure AD / SAML / OIDC, SSO, SCIM, RBAC
• Scripting in Python, Bash, and Groovy
• Ability to work independently with broad ownership; strong documentation discipline; participation in on-call rotation

Preferred Qualifications

• Prior GHES ? GitHub Enterprise Cloud / EMU migration or Jenkins ? GitHub Actions conversion at enterprise scale
• GitHub Enterprise Importer (GEI) and Actions Runner Controller (ARC) production experience
• Artifactory/Xray, SonarQube, or Atlassian Cloud migration experience
• AWS certification (DevOps Engineer Professional or Solutions Architect)
• Experience in a regulated enterprise environment with formal change management

Required Skills :

Basic Qualification :

Additional Skills :

Background Check : No

Drug Screen : No