GitHub SME

GitHub SME – XPT Software AustraliaLocation: Onshore (Sydney) Overview We’re seeking a highly skilled and security‑focused GitHub Subject Matter Expert to drive the modernization and secure consolidation of our code repositories onto the strategic GitHub Enterprise Cloud platform. The role enforces enterprise security standards, implements modern identity management, and ensures robust governance across our entire development ecosystem. The SME will be the top technical authority on GitHub architecture, policy enforcement, and complex integrations, transforming our development practices to align with DevSecOps best practices. Key Responsibilities and Deliverables Enterprise Identity and Access Management (IAM) EMU Implementation: Design and implement the migration from existing Single Sign‑On (SSO) to Enterprise Managed Users (EMU) to centralise user lifecycle management and enforce corporate identity standards. Identity Provider Integration: Lead integration of GitHub Enterprise Cloud with our IdP (e.g., Azure AD/Google Workspace) for seamless SSO and Multi‑Factor Authentication (MFA). RBAC and Policy: Define, implement, and enforce a Role‑Based Access Control model founded on least privilege across all GitHub Organizations. Token Governance: Overhaul and formalise the Personal Access Token (PAT) policy, implementing short‑lived expiry dates and fine‑grained permissions for human and service accounts. Repository Migration and CMDB Integration Discovery & Migration: Identify, catalogue, and prepare all code repositories across the Woolworths Group for migration to GitHub, ensuring no code is left behind. CMDB Synchronisation: Integrate the GitHub repository catalogue with the central Configuration Management Database (CMDB) for real‑time visibility and reporting. Code Security and Secret Management Secret Scanning: Implement and manage GitHub Secret Scanning across all repositories to identify and triage embedded secrets (API keys, passwords). Push Protection: Review Push Protection globally across all repositories to proactively block new secrets from being committed to code history. Vulnerability Management: Analyse secret findings, prioritise remediation based on risk, and formalise migration of all active secrets into an approved vaulting solution. API Security and Incident Response API Security Review: Lead a security review of our API utilisation and exposure across platforms like Apigee, Microsoft Graph, and Azure API Gateway, using CodeQL to analyse usage patterns and potential vulnerabilities. Incident Investigation: Perform in‑depth security code reviews to remediate identified issues and quickly identify repositories affected by security incidents, prioritising those that are externally facing. Required Skills and Qualifications (Must‑Haves) Deep GitHub Administration: Extensive, hands‑on experience managing and governing GitHub Enterprise Cloud environments, including organization and enterprise‑level settings. Identity & Access Management: Proven expertise in SAML SSO, SCIM, and IdP integration (e.g., Azure AD/Google Workspace), including the full EMU setup and migration lifecycle. DevSecOps Automation: Strong scripting skills (Python, Bash) and experience with GitHub Actions/Workflows to automate security policies, repository metadata updates (CMDB integration), and remediation tasks. API Security: Deep understanding of API security principles (OAuth, scopes, token usage) and experience reviewing code that integrates with major platforms (Apigee, Microsoft Graph). Good to Have Azure DevOps administration experience. Soft Skills and Certifications Analytical Rigor: Ability to translate complex security findings into actionable remediation plans. Communication: Excellent verbal and written skills to articulate complex security risks to technical engineers and executive stakeholders. Certification (Mandatory) GitHub Certified Administrator or equivalent enterprise security certification (e.g., related to cloud security or identity management). Seniority Level Mid‑Senior level Employment Type Full‑time Job Function Other – IT Services and IT Consulting #J-18808-Ljbffr