Software Development Platform Engineer

About the Company

Responsibilities

• ● Platform Administration & Governance
• ● Administer and maintain Azure DevOps and GitHub organizations, including projects, repositories, pipelines, permissions, and policies.
• ● Manage platform governance, including branch protections, environment controls, and repository standards.
• ● Support onboarding, configuration, and lifecycle management of development tools, integrations, and automation services.
• ● Identity, Access, and Security Management
• ● Manage and govern service principals, managed identities, and application registrations used across CI/CD and automation workflows.
• ● Implement best practices for token lifecycle management, including PATs, OAuth tokens, GitHub App tokens, and workload identities.
• ● Enforce secure authentication and authorization patterns, including least privilege access, role-based access control (RBAC), and conditional access policies.
• ● Monitor and audit identity usage across platforms to detect anomalies, expired credentials, or misconfigurations.
• ● Partner with security teams to ensure compliance with enterprise identity standards and regulatory requirements.
• ● SDLC & CI/CD Enablement
• ● Support teams in implementing and optimizing SDLC processes aligned with organizational standards.
• ● Build, maintain, and troubleshoot CI/CD pipelines across Azure DevOps and GitHub Actions.
• ● Improve build, test, and deployment workflows to increase reliability, repeatability, and speed.
• ● Promote best practices in automation, artifact management, and release engineering.
• ● Security & Compliance
• ● Implement and maintain security tooling such as SAST, dependency scanning, secrets detection, and policy enforcement.
• ● Ensure secure configuration of pipelines, runners/agents, and platform integrations.
• ● Assess, govern, and securely integrate AI-assisted development tools (e.g., copilots, code review assistants, chat/agent automations) into Azure DevOps/GitHub and SDLC workflows by enforcing data protection and access controls (least privilege, secrets isolation, token hygiene), validating vendor/security posture, defining acceptable-use and logging/audit requirements, and mitigating risks such as sensitive data leakage, prompt injection, and supply-chain compromise.
• ● Participate in incident response and root cause analysis for platform or identity related issues.

Requirements

• ● Hands-on experience administering Azure DevOps and GitHub in an enterprise environment.
• ● Strong understanding of CI/CD concepts, pipelines, and automation workflows.
• ● Familiarity with SDLC methodologies and development lifecycle tooling.
• ● Understanding of identity and access management (IAM) principles, including RBAC, least privilege, birthright, and credential hygiene.
• ● Ability to troubleshoot platform, pipeline, identity, integration issues, and REST APIs.
• ● Strong communication skills and a collaborative mindset.
• ● Scripting experience (PowerShell, Bash, Python) for automation and identity governance.
• ● Applies Azure CLI to manage service principals, role assignments, and identity policies supporting secure DevOps architectures across Azure DevOps, GitHub, and Azure services.
• ● Knowledge of cloud platforms, especially Azure and Microsoft Entra ID.
• ● Exposure to workload identity federation and modern token based authentication patterns.
• ● If you are in ETAP or RIB, please delete the below and this line.
• ● R&D at AVEVA
• ● Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design. AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.
• ● Our track record of innovation is no fluke - it's the result of a structured and deliberate focus on learning, collaboration and inclusivity. If you want to build applications that solve big problems, join us.
• ● Find out more: aveva.com/en/about/careers/r-and-d-careers/
• ● USA Benefits include:
• ● Flex work hours, 20 days PTO rising to 25 with service, three paid volunteering days, primary and secondary parental leave, well-being support, medical, dental, vision, and 401K.
• ● It's possible we're hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.
• ● Find out more: aveva.com/en/about/careers/benefits/
• ● Hybrid working