Software Development Platform Engineer

aveva; United States; On-site; USD 118,000 - 196,000; Full time

Job summary

AVEVA is seeking a Software Development Platform Architect & Administrator to lead the administration and governance of our Azure DevOps and GitHub ecosystems in an enterprise setting in the United States.

You will drive SDLC enablement, platform security, identity management, and automation across CI/CD pipelines, while collaborating with security teams to enforce least privilege and token hygiene. Strong scripting skills and IaC experience are essential.

Qualifications

• Hands-on experience administering Azure DevOps and GitHub in an enterprise environment.
• Strong understanding of CI/CD concepts, pipelines, and automation workflows.
• Familiarity with SDLC methodologies and development lifecycle tooling.
• Experience managing service principals, tokens, and identity based automation.
• Understanding IAM principles: RBAC, least privilege, credential hygiene.
• Ability to troubleshoot platform, pipeline, identity, integration issues, and REST APIs.
• Experience with security tooling such as code scanning, dependency management, or secrets detection.

Responsibilities

• Administer and maintain Azure DevOps and GitHub organizations, including projects, repositories, pipelines, permissions, and policies.
• Manage platform governance, including branch protections, environment controls, and repository standards.
• Support onboarding, configuration, and lifecycle management of development tools, integrations, and automation services.
• Manage service principals, identities, and application registrations used across CI/CD and automation workflows.
• Enforce secure authentication and authorization patterns (RBAC, least privilege, conditional access).
• Monitor and audit identity usage across platforms to detect anomalies and misconfigurations.
• Collaborate with security teams to ensure compliance with enterprise identity standards.

Skills

CI/CD concepts

Scripting (PowerShell, Bash, Python)

Azure CLI

Strong communication

Enterprise DevOps experience

Tools

Azure DevOps

GitHub

Terraform

ARM/Bicep

ConductorOne

SailPoint

Job description

AVEVA is creating software trusted by over 90% of leading industrial companies.

Salary Range

$117,600.00 - $196,200.00

T his pay range represents the minimum and maximum compensation that the position offers, and final compensation can vary within the range depending on work location, job experience, skills, and relevant educational attainment and/or training.

Software Development Platform Architect & Administrator

Key Responsibilities

Platform Administration & Governance

Administer and maintain Azure DevOps and GitHub organizations, including projects, repositories, pipelines, permissions, and policies.

Manage platform governance, including branch protections, environment controls, and repository standards.

Support onboarding, configuration, and lifecycle management of development tools, integrations, and automation services.

Identity, Access, and Security Management

Manage and govern service principals, managed identities, and application registrations used across CI/CD and automation workflows.

Implement best practices for token lifecycle management, including PATs, OAuth tokens, GitHub App tokens, and workload identities.

Enforce secure authentication and authorization patterns, including least privilege access, role-based access control (RBAC), and conditional access policies.

Monitor and audit identity usage across platforms to detect anomalies, expired credentials, or misconfigurations.

Partner with security teams to ensure compliance with enterprise identity standards and regulatory requirements.

SDLC & CI/CD Enablement

Support teams in implementing and optimizing SDLC processes aligned with organizational standards.

Build, maintain, and troubleshoot CI/CD pipelines across Azure DevOps and GitHub Actions.

Improve build, test, and deployment workflows to increase reliability, repeatability, and speed.

Promote best practices in automation, artifact management, and release engineering.

Security & Compliance

Implement and maintain security tooling such as SAST, dependency scanning, secrets detection, and policy enforcement.

Ensure secure configuration of pipelines, runners/agents, and platform integrations.

Assess, govern, and securely integrate AI-assisted development tools (e.g., copilots, code review assistants, chat/agent automations) into Azure DevOps/GitHub and SDLC workflows by enforcing data protection and access controls (least privilege, secrets isolation, token hygiene), validating vendor/security posture, defining acceptable-use and logging/audit requirements, and mitigating risks such as sensitive data leakage, prompt injection, and supply-chain compromise.

Participate in incident response and root cause analysis for platform or identity related issues.

Document standards, patterns, and platform configurations to support operational excellence.

Architecture & Continuous Improvement

Contribute to the design and evolution of the software development platform architecture.

Evaluate new tools, integrations, and identity models to improve developer productivity and platform scalability.

Identify opportunities to simplify workflows, reduce friction, and standardize platform usage across teams.

Qualifications

Required

• Hands-on experience administering Azure DevOps and GitHub in an enterprise environment.
• Strong understanding of CI/CD concepts, pipelines, and automation workflows.
• Familiarity with SDLC methodologies and development lifecycle tooling.
• Experience managing service principals, tokens, and identity based automation.
• Understanding of identity and access management (IAM) principles, including RBAC, least privilege, birthright, and credential hygiene.
• Ability to troubleshoot platform, pipeline, identity, integration issues, and REST APIs.
• Experience with security tooling such as code scanning, dependency management, or secrets detection.
• Strong communication skills and a collaborative mindset.
• Scripting experience (PowerShell, Bash, Python) for automation and identity governance.
• Applies Azure CLI to manage service principals, role assignments, and identity policies supporting secure DevOps architectures across Azure DevOps, GitHub, and Azure services.

Preferred

• Experience with infrastructure-as-code (Terraform, ARM/Bicep) for platform and identity provisioning.
• Knowledge of cloud platforms, especially Azure and Microsoft Entra ID.
• Exposure to workload identity federation and modern token based authentication patterns.
• Experience administering Identity Governance platforms, including ConductorOne and SailPoint, with a focus on enterprise ‑level access governance and platform administration Experience integrating GHAS findings into Azure DevOps, SIEM/SOAR platforms, and secure SDLC pipelines to drive automated remediation and continuous hardening.
• Experience applying Hypervelocity engineering principles to accelerate developer workflows, reduce cognitive load, and streamline platform operations across Azure DevOps and GitHub.
• Experience designing and implementing Azure DevOps pipeline