Platform DevOps Engineer

Position Summary

The Platform DevOps Engineer is responsible for building and maintaining the CI/CD pipelines, GitOps delivery workflows, and developer experience tooling for the H100 platform. This role bridges infrastructure and application delivery, ensuring that platform changes flow through automated, tested, and auditable pipelines from code commit to production deployment.

Key Responsibilities

• Design and maintain GitHub Actions CI/CD pipelines: Terraform plan/apply, KCC manifest validation, container image builds, security scanning
• Build and maintain GitOps delivery pipelines using Config Sync: Git, OCI, and Helm source types across multiple GKE clusters
• Manage GitHub organization settings, repository configurations, branch protection rules, CODEOWNERS, and PR workflows
• Develop reusable GitHub Actions workflows and composite actions for the platform team and tenant application teams
• Build container image pipelines: Dockerfile authoring, multi-stage builds, vulnerability scanning (Snyk/Trivy), SBOM generation, image signing
• Manage JFrog Artifactory: repository configuration, artifact promotion pipelines, cleanup policies, integration with GitHub Actions
• Implement and manage Workload Identity Federation (WIF) for GitHub Actions: WIF pools, providers, SA bindings for keyless authentication
• Build deployment pipelines for the Prism AI platform: API, web console, agents, and KCC collector services to GKE
• Implement security gates in pipelines: OPA policy checks, Gatekeeper constraint validation, SAST/DAST integration, dependency scanning
• Manage Artifact Registry: OCI artifact publishing for Config Sync, container image lifecycle, repository IAM
• Create developer experience tooling: PR validation bots, automated changelog generation, release management scripts
• Monitor pipeline health: build success rates, deployment frequency, lead time, MTTR metrics

Required Qualifications & Skills

• 7+ years in DevOps/platform engineering with strong CI/CD focus
• Expert GitHub Actions: workflow authoring, composite actions, reusable workflows, self-hosted runners, GitHub Apps, OIDC/WIF
• GitOps expertise: Config Sync, ArgoCD, or Flux in production Kubernetes environments
• Container pipeline experience: Docker, Buildkit, multi-arch builds, vulnerability scanning, SBOM
• Terraform CI/CD: automated plan/apply pipelines with approval gates, state management, drift detection
• Google Cloud Platform Artifact Registry and/or JFrog Artifactory administration
• Git expertise: branching strategies, monorepo patterns, conventional commits, semantic versioning
• Security pipeline integration: SAST, DAST, SCA, container scanning, secret detection
• Kubernetes deployment strategies: rolling updates, canary, blue-green in GKE
• Strong YAML, Bash, and Python for pipeline scripting

Preferred / Nice-to-Have

• Experience with GitHub Enterprise Cloud administration and SSO (SAML/Entra ID)
• Familiarity with Kustomize and KCC manifests for GitOps-based infrastructure delivery
• Experience with OCI artifacts as Config Sync sources
• Familiarity with Prism AI or similar AI-driven operations platforms
• Experience with Packer for VM image builds (runner images)

Technology Stack

• CI/CD: GitHub Actions, Config Sync, JFrog Artifactory, Artifact Registry
• Containers: Docker, Buildkit, GKE, ARC, Snyk/Trivy, cosign
• IaC: Terraform, Kustomize, Helm, KCC YAML
• Cloud: Google Cloud Platform (GKE, Artifact Registry, IAM, WIF, Secret Manager, Cloud Build)
• Security: OPA/Rego, Gatekeeper, Snyk, secret scanning, SBOM (CycloneDX/SPDX)
• Scripting: Bash, Python, YAML, JavaScript/TypeScript (GitHub Actions)
• VCS: GitHub Enterprise Cloud, Git, PR workflows, CODEOWNERS

Experience

7+ years DevOps/CI/CD; 3+ years GitHub Actions; 2+ years GitOps/Kubernetes delivery.