About the Role
AVEVA is creating software trusted by over 90% of leading industrial companies.
Responsibilities
- Administer and maintain Azure DevOps and GitHub organizations, including projects, repositories, pipelines, permissions, and policies.
- Manage platform governance, including branch protections, environment controls, and repository standards.
- Support onboarding, configuration, and lifecycle management of development tools, integrations, and automation services.
- Manage and govern service principals, managed identities, and application registrations used across CI/CD and automation workflows.
- Implement best practices for token lifecycle management, including PATs, OAuth tokens, GitHub App tokens, and workload identities.
- Enforce secure authentication and authorization patterns, including least privilege access, role-based access control (RBAC), and conditional access policies.
- Monitor and audit identity usage across platforms to detect anomalies, expired credentials, or misconfigurations.
- Partner with security teams to ensure compliance with enterprise identity standards and regulatory requirements.
- Support teams in implementing and optimizing SDLC processes aligned with organizational standards.
- Build, maintain, and troubleshoot CI/CD pipelines across Azure DevOps and GitHub Actions.
- Improve build, test, and deployment workflows to increase reliability, repeatability, and speed.
- Promote best practices in automation, artifact management, and release engineering.
- Implement and maintain security tooling such as SAST, dependency scanning, secrets detection, and policy enforcement.
- Ensure secure configuration of pipelines, runners/agents, and platform integrations.
- Assess, govern, and securely integrate AI-assisted development tools into Azure DevOps/GitHub and SDLC workflows by enforcing data protection and access controls, validating vendor/security posture, defining acceptable-use and logging/audit requirements, and mitigating risks.
- Participate in incident response and root cause analysis for platform or identity related issues.
- Document standards, patterns, and platform configurations to support operational excellence.
- Contribute to the design and evolution of the software development platform architecture.
- Evaluate new tools, integrations, and identity models to improve developer productivity and platform scalability.
- Identify opportunities to simplify workflows, reduce friction, and standardize platform usage across teams.
Requirements
- Hands-on experience administering Azure DevOps and GitHub in an enterprise environment.
- Strong understanding of CI/CD concepts, pipelines, and automation workflows.
- Familiarity with SDLC methodologies and development lifecycle tooling.
- Experience managing service principals, tokens, and identity based automation.
- Understanding of identity and access management (IAM) principles, including RBAC, least privilege, birthright, and credential hygiene.
- Ability to troubleshoot platform, pipeline, identity, integration issues, and REST APIs.
- Experience with security tooling such as code scanning, dependency management, or secrets detection.
- Strong communication skills and a collaborative mindset.
- Scripting experience (PowerShell, Bash, Python) for automation and identity governance.
- Applies Azure CLI to manage service principals, role assignments, and identity policies supporting secure DevOps architectures across Azure DevOps, GitHub, and Azure services.
- Experience with infrastructure-as-code (Terraform, ARM/Bicep) for platform and identity provisioning.
- Knowledge of cloud platforms, especially Azure and Microsoft Entra ID.
- Exposure to workload identity federation and modern token based authentication patterns.
- Experience administering Identity Governance platforms, including ConductorOne and SailPoint, with a focus on enterprise‑level access governance and platform administration.
- Experience integrating GHAS findings into Azure DevOps, SIEM/SOAR platforms, and secure SDLC pipelines to drive automated remediation and continuous hardening.
- Experience applying Hypervelocity engineering principles to accelerate developer workflows, reduce cognitive load, and streamline platform operations across Azure DevOps and GitHub.
- Experience designing and implementing Azure DevOps pipeline decorators to enforce organization‑wide governance, inject mandatory security and compliance tasks, and standardize CI/CD behavior across all pipelines without requiring changes from individual development teams.
Skills
- Azure DevOps
- GitHub
- CI/CD
- Automation
- Service principals
- Managed identities
- Application registrations
- Token lifecycle management
- RBAC
- Conditional access policies
- REST APIs
- SAST
- Dependency scanning
- Secrets detection
- PowerShell
- Bash
- Python
- Azure CLI
- Terraform
- ARM/Bicep
- Azure
- Microsoft Entra ID
- Workload identity federation
- ConductorOne
- SailPoint
- GHAS
- SIEM/SOAR
- Hypervelocity engineering
Location
- USA
Work Type
- Hybrid working
- Remote
Experience Level
- Enterprise environment
- Experience managing service principals, tokens, and identity based automation
- Experience with security tooling
- Scripting experience
- Experience with infrastructure-as-code
- Experience administering Identity Governance platforms
- Experience integrating GHAS findings
- Experience applying Hypervelocity engineering principles
- Experience designing and implementing Azure DevOps pipeline decorators
Salary/Compensations
- $117,600.00 - $196,200.00
Benefits
- Flex work hours
- 20 days PTO rising to 25 with service
- three paid volunteering days
- primary and secondary parental leave
- well-being support
- medical
- dental
- vision
- 401K
About the Company
- AVEVA is creating software trusted by over 90% of leading industrial companies.
- Our global team of 2000+ developers work on an incredibly diverse portfolio of over 75 industrial automation and engineering products, which cover everything from data management to 3D design.
- AI and cloud are at the centre of our strategy, and we have over 150 patents to our name.
- Our track record of innovation is no fluke – it’s the result of a structured and deliberate focus on learning, collaboration and inclusivity.
- AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries.
- Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.
- We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy.
Equal Opportunity
- AVEVA is committed to recruiting and retaining people with disabilities.
- AVEVA is an Equal Opportunity Employer.
- We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect.
- We value diversity and the expertise that people from different backgrounds bring to our business.
- AVEVA provides reasonable accommodation to applicants with disabilities where appropriate.
- Determinations on requests for reasonable accommodation will be made on a case-by-case basis.
