Software Development Platform Administration/Architect

AVEVA Denmark; San Leandro (CA); Hybrid; USD 118,000 - 196,000; Full time

Benefits offered by this job

Flex work hours

20 days PTO rising to 25 with service

Three paid volunteering days

Parental leave (primary & secondary)

Well-being support

Medical

Dental

Vision

401K

Job summary

AVEVA is seeking a Software Development Platform Architect & Administrator to lead platform governance, security, and lifecycle management for Azure DevOps and GitHub in a hybrid US environment.

The role focuses on CI/CD enablement, security tooling, and architecture evolution to empower 2000+ developers across the SDLC, while aligning with enterprise identity standards and data protection requirements.

Qualifications

• Hands-on experience administering Azure DevOps and GitHub in an enterprise environment.
• Strong understanding of CI/CD concepts, pipelines, and automation workflows.
• Familiarity with SDLC methodologies and development lifecycle tooling.
• Experience managing service principals, tokens, and identity based automation.
• IAM principles including RBAC, least privilege, credential hygiene.
• Troubleshoot platform, pipeline, identity, integration issues, and REST APIs.
• Experience with security tooling such as code scanning, dependency management, or secrets detection.
• Strong communication skills and a collaborative mindset.
• Scripting experience (PowerShell, Bash, Python) for automation and identity governance.

Responsibilities

• Administer and maintain Azure DevOps and GitHub organizations, including projects, repositories, pipelines, permissions, and policies.
• Manage platform governance, including branch protections, environment controls, and repository standards.
• Support onboarding, configuration, and lifecycle management of development tools, integrations, and automation services.
• Manage service principals, tokens, and identity-based automation across CI/CD and automation workflows.
• Enforce secure authentication and authorization patterns, including least privilege access and RBAC.
• Monitor and audit identity usage across platforms to detect anomalies and misconfigurations.
• Build, maintain, and troubleshoot CI/CD pipelines across Azure DevOps and GitHub Actions.
• Implement and maintain security tooling such as code scanning, dependency management, or secrets detection.
• Architect and evolve the software development platform for scalability and developer productivity.

Skills

Azure DevOps

GitHub

CI/CD

IAM

RBAC

PowerShell

Python

Bash

Azure CLI

Tools

Terraform

ARM/Bicep

GitHub Actions

Azure DevOps Pipelines

ConductorOne

SailPoint

Job description

Software Development Platform Architect & Administrator

AVEVA is creating software trusted by over 90% of leading industrial companies. Salary Range: $117,600.00 - $196,200.00 This pay range represents the minimum and maximum compensation that the position offers, and final compensation can vary within the range depending on work location, job experience, skills, and relevant educational attainment and/or training.

Key Responsibilities

Platform Administration & Governance

• Administer and maintain Azure DevOps and GitHub organizations, including projects, repositories, pipelines, permissions, and policies.
• Manage platform governance, including branch protections, environment controls, and repository standards.
• Support onboarding, configuration, and lifecycle management of development tools, integrations, and automation services.

Identity, Access, and Security Management

• Manage and govern service principals, managed identities, and application registrations used across CI/CD and automation workflows.
• Implement best practices for token lifecycle management, including PATs, OAuth tokens, GitHub App tokens, and workload identities.
• Enforce secure authentication and authorization patterns, including least privilege access, role-based access control (RBAC), and conditional access policies.
• Monitor and audit identity usage across platforms to detect anomalies, expired credentials, or misconfigurations.
• Partner with security teams to ensure compliance with enterprise identity standards and regulatory requirements.

SDLC & CI/CD Enablement

• Support teams in implementing and optimizing SDLC processes aligned with organizational standards.
• Build, maintain, and troubleshoot CI/CD pipelines across Azure DevOps and GitHub Actions.
• Improve build, test, and deployment workflows to increase reliability, repeatability, and speed.
• Promote best practices in automation, artifact management, and release engineering.

Security & Compliance

• Implement and maintain security tooling such as SAST, dependency scanning, secrets detection, and policy enforcement.
• Ensure secure configuration of pipelines, runners/agents, and platform integrations.
• Assess, govern, and securely integrate AI-assisted development tools (e.g., copilots, code review assistants, chat/agent automations) into Azure DevOps/GitHub and SDLC workflows by enforcing data protection and access controls (least privilege, secrets isolation, token hygiene), validating vendor/security posture, defining acceptable-use and logging/audit requirements, and mitigating risks such as sensitive data leakage, prompt injection, and supply-chain compromise.
• Participate in incident response and root cause analysis for platform or identity related issues.
• Document standards, patterns, and platform configurations to support operational excellence.

Architecture & Continuous Improvement

• Contribute to the design and evolution of the software development platform architecture.
• Evaluate new tools, integrations, and identity models to improve developer productivity and platform scalability.
• Identify opportunities to simplify workflows, reduce friction, and standardize platform usage across teams.

Qualifications

Required

• Hands-on experience administering Azure DevOps and GitHub in an enterprise environment.
• Strong understanding of CI/CD concepts, pipelines, and automation workflows.
• Familiarity with SDLC methodologies and development lifecycle tooling.
• Experience managing service principals, tokens, and identity based automation.
• Understanding of identity and access management (IAM) principles, including RBAC, least privilege, birthright, and credential hygiene.
• Ability to troubleshoot platform, pipeline, identity, integration issues, and REST APIs.
• Experience with security tooling such as code scanning, dependency management, or secrets detection.
• Strong communication skills and a collaborative mindset.
• Scripting experience (PowerShell, Bash, Python) for automation and identity governance.
• Applies Azure CLI to manage service principals, role assignments, and identity policies supporting secure DevOps architectures across Azure DevOps, GitHub, and Azure services.

Preferred

• Experience with infrastructure-as-code (Terraform, ARM/Bicep) for platform and identity provisioning.
• Knowledge of cloud platforms, especially Azure and Microsoft Entra ID.
• Exposure to workload identity federation and modern token based authentication patterns.
• Experience administering Identity Governance platforms, including ConductorOne and SailPoint, with a focus on enterprise-level access governance and platform administration.
• Experience integrating GHAS findings into Azure DevOps, SIEM/SOAR platforms, and secure SDLC pipelines to drive automated remediation and continuous hardening.
• Experience applying Hypervelocity engineering principles to accelerate developer workflows, reduce cognitive load, and streamline platform operations across Azure DevOps and GitHub.
• Experience designing and implementing Azure DevOps pipeline decorators to enforce organization-wide governance, inject mandatory security and compliance tasks, and standardise CI/CD behaviour across all pipelines without requiring changes from individual development teams.

R&D at AVEVA

Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name. Our track record of innovation is no fluke – it’s the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems, join us. Find out more: aveva.com/en/about/careers/r-and-d-careers/

USA Benefits include:

• Flex work hours
• 20 days PTO rising to 25 with service
• three paid volunteering days
• primary and secondary parental leave
• well-being support
• medical
• dental
• vision
• and 401K.
• It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location.
• Specific benefits vary by country, but our packages are similarly comprehensive.

Hybrid working

We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.

About AVEVA

AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries.

Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.

We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy.

Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/

AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria.

AVEVA is an Equal Opportunity Employer.

We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect.

We value diversity and the expertise that people from different backgrounds bring to our business.

AVEVA provides reasonable accommodation to applicants with disabilities where appropriate.

If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter.

Determinations on requests for reasonable accommodation will be made on a case-by-case basis.

We’re the first software business in the world to have our sustainability targets validated by the SBTi, and we’ve been recognised for the transparency and ambition of our commitment to diversity, equity, and inclusion.

We’ve also recently been named as one of the world’s most innovative companies.

If you’re a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you! Find out more at AVEVA Careers.

For more information about our privacy policy and how to manage cookies, visit our Privacy Policy.