job summary:
Randstad is seeking a Senior GitHub Platform Engineer for a premier client based in the Washington, DC area. In this high-impact role, you will serve as the primary architect and engineer for our enterprise-scale GitHub ecosystem, moving beyond standard administration to treat the GitHub suite as a scalable, secure, and automated internal platform. You will design and enforce enterprise-level governance via policy-as-code, scale CI/CD infrastructure utilizing Kubernetes-driven autoscaling, lead high-visibility legacy migrations, and spearhead the rollout of GitHub Advanced Security (GHAS) and GitHub Copilot to optimize developer experience across the organization.
location: Washington, Washington, D.C.
job type: Contract
salary: $50 - 57 per hour
work hours: 9am to 5pm
education: Bachelors
responsibilities:
Platform Administration & Governance: Oversee GitHub Enterprise Cloud (EMU) and Enterprise Server architectures, establishing enterprise-level policy management, org-wide rulesets, branch protection, and identity management via SAML/SCIM SSO (Entra ID/Okta).
Infrastructure & Automation: Implement policy-as-code for platform settings using Terraform and the GitHub API; build custom automation workflows using REST/GraphQL APIs, GitHub Apps, webhook-driven services, and the GitHub CLI.
Advanced Actions Architecture: Scale and operate self-hosted runners on Kubernetes using Actions Runner Controller (ARC); curate a centralized, version-controlled reusable workflow and composite action library; manage usage, spend, and runner groups.
Supply Chain & Pipeline Security: Administer and roll out GitHub Advanced Security (GHAS)-including CodeQL, secret scanning with push protection, and Dependabot-while authoring custom CodeQL queries, tuning SAST results, and establishing remediation SLAs.
Migration & Modernization: Lead complex, enterprise-wide migrations to GitHub from legacy systems (GitLab, Bitbucket, Azure DevOps, Jenkins) using GitHub Enterprise Importer ( gh gei ) and modernize legacy pipelines into secure GitHub Actions.
Developer Experience (DevEx): Drive GitHub Copilot enablement and governance; build self-service developer "golden paths" and portal integrations (e.g., Backstage); define and report on DORA, security posture, and platform metrics via audit logs.
qualifications:
GitHub Expertise: 3+ years of dedicated, hands-on experience administering GitHub Enterprise at scale, separate from general DevOps engineering.
DevOps Infrastructure: 5+ years of comprehensive DevOps, Platform, or Site Reliability Engineering experience.
Cloud & Containers: Proven experience deploying and scaling infrastructure on Kubernetes, specifically managing Actions Runner Controller (ARC) or similar autoscaling runner architectures.
Security & Identity Integration: Deep familiarity with hardening CI/CD pipelines (OIDC keyless cloud auth, pinning actions to SHAs), identity provider routing (SAML/SCIM), and enterprise SAST tooling.
FinOps & Spend Management: Practical knowledge of managing and optimizing GitHub's metered billing models across Actions, Packages, and GHAS.
Location: Ability to work or hybrid-commute to the Washington, DC area as requested by the client.
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.
![]()
Never miss an opportunity! Create an alert based on the job you applied for.
