Senior DevOps Engineer

CRC Group; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Drug Free Workplace

Job summary

CRC Group is seeking a Senior DevOps Engineer to own GitHub Enterprise governance, IaC with Terraform, and CI/CD pipelines on Azure. The role requires hands-on GitHub Enterprise administration, Terraform, and Azure DevOps expertise, with a focus on secure, scalable automation and AI-enabled development guardrails.

The position offers hybrid work in multiple U.S. cities and collaboration with cloud, security, and software teams to deliver production-ready platforms.

Qualifications

• 5+ years in DevOps, platform engineering, or software engineering.
• Experience administering GitHub Enterprise in a multi-team environment.
• Designing, building, and supporting production CI/CD pipelines with Infrastructure as Code (Terraform).
• Experience integrating source control with an enterprise identity provider (SSO/SCIM).
• Experience working in Agile development teams.

Responsibilities

• Administer GitHub Enterprise Cloud/Server at enterprise level with governance.
• Own identity integration with Entra ID, SSO/SCIM, and access reviews.
• Define and enforce repository governance: CODEOWNERS, branch protection, reviews.
• Configure and operate GitHub Apps, OAuth apps, and tokens with review processes.
• Develop and maintain Terraform modules and IaC pipelines for platform changes.
• Lead Azure DevOps migrations or coexistence with GitHub.
• Define branching, release, and versioning strategies for monorepo/polyrepo setups.
• Build integrations between GitHub and enterprise systems (Entra ID, ITSM, Azure Monitor).

Skills

GitHub Enterprise

CI/CD pipelines

Terraform

Azure DevOps

Automation scripting

Tools

GitHub Actions

GitHub REST/GraphQL

Azure DevOps

Job description

CRC Group is seeking a Senior DevOps Engineer to own three tightly connected pieces of our platform: administration and governance of GitHub Enterprise, infrastructure-as-code design using Terraform, and the CI/CD pipelines and cloud deployment architecture that move code from development to production on Microsoft Azure.

The successful candidate combines hands-on GitHub Enterprise administration with strong DevOps engineering skills — Terraform, GitHub Actions and Azure DevOps Pipelines, cloud-native deployment on Azure — and sufficient coding ability to build the automation and integrations the platform needs. They are motivated to bring AI-assisted development (GitHub Copilot, AI agents, Model Context Protocol services) into the workflow safely and at scale, and can partner effectively with cloud engineers, network engineers, security engineers, software developers, and identity/access governance professionals.

Location: This position can be hybrid in Dallas, Charlotte, Raleigh and Atlanta.

• Administer GitHub Enterprise Cloud at the enterprise and organization level: enterprise settings, organization structure, teams, roles, and permission models.
• Own identity integration with Microsoft Entra ID, including SAML SSO, SCIM provisioning, and Enterprise Managed Users (EMU) where applicable; manage the join/move/leave lifecycle and periodic access reviews.
• Define and enforce repository governance through rulesets, branch protection, required reviews, CODEOWNERS, commit signing, and repository creation/visibility policies.
• Govern GitHub Apps, OAuth apps, personal access tokens (fine-grained PATs), deploy keys, and third-party integrations; maintain an approval and review process for new connectors.
• Configure and operate GitHub Advanced Security: code scanning (CodeQL), secret scanning with push protection, Dependabot alerts and updates, and security overview reporting.

Infrastructure as Code & Platform Engineering

• Design and codify platform infrastructure as Terraform modules — repositories, teams, rulesets, Actions and Azure DevOps configuration — with disciplined state management and module design, so platform changes are reviewable, versioned, and repeatable rather than made by hand.
• Design and operate the runner strategy: GitHub-hosted, larger runners, and self-hosted runners (including Actions Runner Controller on Kubernetes or Azure VM scale sets), with hardening, patching, and scaling.
• Implement keyless cloud authentication from pipelines using OpenID Connect (OIDC) federation to Azure; eliminate long-lived credentials from CI/CD.
• Manage pipeline secrets and environments (GitHub Environments, Azure Key Vault integration), deployment approvals, and protection rules.
• Implement software supply-chain controls: dependency review, SBOM generation, artifact attestation/provenance, and pinned action versions.
• Design, build, and maintain reusable GitHub Actions workflows, composite actions, and reusable workflow libraries that standardize build, test, security scan, and deployment stages across teams.
• Administer Azure DevOps (organizations, projects, agent pools, service connections, Pipelines) and lead migrations or coexistence strategies between Azure DevOps and GitHub.
• Define branching, release, and versioning strategies with development teams; support monorepo and polyrepo patterns as needed.
• Build integrations between GitHub and enterprise systems (Entra ID, ServiceNow/ITSM, Azure Monitor, Teams, security tooling).
• Troubleshoot pipeline failures, runner issues, and platform incidents; act as escalation point for GitHub-related production issues.

Development, Automation & AI Enablement

• Develop scripts and internal tooling against the GitHub REST and GraphQL APIs to automate administration, reporting, and compliance.
• Evaluate and pilot AI-enabled development capabilities — Copilot features, AI agents, and MCP services — and define the guardrails for their use in the platform.
• Produce and maintain platform documentation, runbooks, architecture decision records, and developer onboarding guides.
• Participate in Agile ceremonies and collaborate with architects, security engineers, and business stakeholders to prioritize platform work.

Required Qualifications

Experience

• 5+ years in DevOps, platform engineering, or software engineering roles.
• Experience administering GitHub Enterprise (Cloud or Server) at the organization or enterprise level in a multi-team environment.
• Demonstrated experience designing, building, and supporting production CI/CD pipelines, including infrastructure-as-code with Terraform.
• Experience integrating source control platforms with an enterprise identity provider (SSO/SCIM).
• Experience working within Agile development teams.
• Enterprise and organization administration, roles, and permission models.
• Rulesets, branch protection, CODEOWNERS, and repository governance.
• GitHub Actions: workflow authoring, reusable workflows, runner management.
• GitHub Advanced Security (code scanning, secret scanning, Dependabot).
• GitHub REST and GraphQL APIs; GitHub CLI.
• Audit log, security overview, and enterprise reporting.

Infrastructure as Code & DevOps Skills

• Terraform and Infrastructure as Code principles, including state management and module design — required, hands-on experience.
• Secrets management and pipeline identity (OIDC federation, Azure Key Vault).
• Azure DevOps administration and Pipelines.
• Containers and container registries; familiarity with Kubernetes for runner hosting.
• Git internals and branching/release strategies.

Programming Skills

Communication

• Strong written and verbal communication; able to write clear policy, runbooks, and technical documentation.
• Able to explain platform and security decisions to both engineers and non-technical stakeholders.
• Strong problem-solving and analytical skills.

CRC Group supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. CRC Group is a Drug Free Workplace.