Senior GitHub Platform Engineer

Requirements

• Significant experience administering GitHub Enterprise Cloud environments at scale, or equivalent experience in platform engineering, developer tooling, identity integration, and DevSecOps governance.

• Demonstrated experience with Enterprise Managed Users and identity provider integration, preferably with Microsoft Entra ID.

• Strong understanding of role-based access control, SAML or OIDC single sign on, SCIM provisioning, access reviews, and least privilege models.

• Experience administering GitHub Actions, reusable workflows, and enterprise workflow governance.

• Strong scripting and automation skills using Python, PowerShell, Bash, or similar tools, with hands on experience using GitHub APIs.

• Experience administering and configuring GitHub Advanced Security, including CodeQL, Dependabot, dependency review, secret scanning, and push protection.

• Experience with branch protection, required status checks, audit log streaming, compliance reporting, and access reviews in regulated or controlled environments.

• Familiarity with Infrastructure as Code and policy driven automation using tools such as Terraform or Bicep.

• Strong communication and documentation skills, with experience creating standards, runbooks, and enablement content for technical audiences.

• Experience managing Copilot, governing adoption, and tracking utilization.

Nice to have

• Experience supporting software delivery in regulated industries such as financial services, gaming, lottery, or government.

• Familiarity with Azure and AWS integration patterns for GitHub, including identity alignment and secure workflow execution.

• Experience with self hosted runner governance and secure execution environments, where GitHub Actions infrastructure is part of platform scope.

• Experience supporting audit readiness, change management evidence, and SOX aligned software delivery controls.

• Experience establishing GitHub governance and operating standards in complex or multi organization environments.

Responsibilities

• Administer and manage the GitHub Enterprise Cloud environment, including organizations, teams, repositories, enterprise settings, licensing, and platform policies.

• Monitor platform health, usage, storage, and adoption trends, and provide reporting and recommendations to leadership.

• Establish operational standards for backup, recovery, and business continuity for repositories, configurations, and key integrations.

• Serve as the primary liaison to GitHub Enterprise support for escalations, service requests, and feature enablement.

• Lead the implementation and administration of Enterprise Managed Users integrated with Microsoft Entra ID using SAML or OIDC for authentication and SCIM for provisioning and lifecycle management.

• Design and maintain a scalable role-based access model aligned to least privilege principles across enterprise, organization, team, and repository scopes.

• Manage onboarding, offboarding, access reviews, team membership, external access where applicable, and access request processes through documented and auditable controls.

• Govern GitHub Apps, OAuth integrations, token usage, and third party access through approval standards and periodic review.

• Define and enforce enterprise standards for repository naming, visibility, ownership, branching, custom properties, and administrative conventions across all GitHub organizations.

• Establish and maintain the GitHub governance framework, including organization level rulesets, branch and tag protection policies, repository templates, and required approval patterns.

• Administer, configure, and manage GitHub Advanced Security capabilities across the enterprise, including CodeQL, Dependabot, dependency review, secret scanning, push protection, alert management, and security policy configuration.

• Configure audit logging, external log streaming, evidence retention, and reporting processes to support compliance, investigations, and internal controls, including SOX aligned requirements where applicable.

• Investigate and coordinate response to repository related security incidents, policy violations, and credential exposure events.

• Automate administrative tasks such as repository provisioning, policy enforcement, team assignment, and access review workflows using GitHub REST APIs, GraphQL APIs, and scripting in Python, PowerShell, or Bash.

• Govern GitHub Actions standards across the enterprise, including reusable workflows, workflow policies, required checks, and secure workflow design.

• Where in scope, establish standards for self hosted runners, including security boundaries, lifecycle management, and capacity planning.

• Develop documentation, runbooks, standards, and training materials, and serve as the internal subject matter expert for GitHub Enterprise.

Client

A global leader with a sharp focus on lottery solutions. A confident step forward building on a long history of delivering safe and secure technology, demonstrating strong commitment to customers as a dedicated lottery service provider. Leveraging collective insight, experience, and expertise to create reliable and engaging solutions that help lottery clients achieve objectives, meet player needs, and deliver meaningful benefits to communities.