Our client is looking for Enterprise GitHub Administrator to oversee the administration of the Enterprise GitHub Cloud platform, support GitHub Advanced Security and GitHub Copilot administration, and support the GitHub portion of the SDLC and CI/CD platform initiative -
4 months contract to start, likely will renew, 3 days a week in Greater Vancouver office
*Please note that for the successful candidate will be required to provide and use their own laptop for the duration of the contract.
The contractor will assist the company’s GitHub Administrator with the administration of the Enterprise GitHub Cloud platform, support GitHub Advanced Security and GitHub Copilot administration, and support the GitHub portion of the SDLC and CI/CD platform initiative being delivered by Deloitte. The role requires more than a procedural understanding of GitHub: the contractor must bring code and build management experience from a DevOps environment and provide hands-on technical administration of the platform, in addition to management administration, including the configuration and support of pre-built integrations requested by development and delivery teams.
Must haves:
• Diploma or degree in computer science, information technology or other relevant discipline.
• Minimum of 3–5 years’ hands-on experience administering GitHub Enterprise Cloud (enterprise and organization owner level) in a large, multi-organization environment.
• Demonstrated code and build management experience in a DevOps environment, including source control management, build and release management, CI/CD pipelines and artifact/package management.
• Proven technical (not only procedural) administration of GitHub, including installing, configuring and troubleshooting GitHub Apps, Marketplace apps, webhooks and third-party integrations.
• Demonstrated experience administering GitHub Advanced Security, including CodeQL, secret scanning, push protection, Dependabot and security configurations.
• Strong experience with repository management and governance, including branching strategies, rulesets, branch protection, CODEOWNERS, repository templates and repository lifecycle management.
• Hands-on experience building, configuring and troubleshooting GitHub Actions workflows, reusable workflows, runners and runner groups to support CI/CD.
• Experience integrating GitHub with Jira Cloud (e.g. GitHub for Jira app, webhooks) to enable end-to-end SDLC traceability.
• Solid understanding of identity and access management for GitHub, including SAML SSO, Entra ID / Active Directory group synchronization, GitHub Apps, tokens and service accounts.
• Working knowledge of DevSecOps and secure software development lifecycle practices.
• Scripting and automation skills (e.g. PowerShell, Bash or Python) and experience with the GitHub REST/GraphQL APIs and GitHub CLI.
• Experience working with system integrators and in multi-vendor IT environments, and with IT service management tools (e.g. ServiceNow).
• Experience administering GitHub Copilot Business, including enterprise-managed settings, policy configuration, access management and usage reporting.
• Experience configuring or governing GitHub Copilot custom agents and repository instructions using Markdown.
• Strong documentation skills; confident communicator and proactive professional.
Assets:
• Knowledge of GitHub cloud license management options, including GitHub Enterprise named-user licensing, Visual Studio subscriptions with GitHub Enterprise, GHAS active-committer billing, usage-based (metered) billing through an Azure subscription, cost centres, and budgets and alerts.
• Familiarity with Jira Rovo and GitHub Copilot integration or interoperability investigation.
• GitHub certifications (e.g. GitHub Administration, GitHub Advanced Security, GitHub Actions).
• Jira Cloud administration experience.
• Experience with Microsoft Defender for Cloud integration with GitHub.
• Experience in a utility, public-sector or similarly regulated environment.
• Experience migrating repositories and CI/CD pipelines from other platforms (e.g. Azure DevOps, Bitbucket, Jenkins) to GitHub.
Duties:
Platform Administration
• Assists the GitHub Administrator with day-to-day administration of the company’s GitHub Enterprise Cloud (GHEC) environment, including enterprise and organization settings, policies, roles and permissions, in accordance with the company's Enterprise GitHub Administrative Guide and supporting knowledge articles.
• Creates and maintains GitHub organizations, teams, cost centres and repositories; manages team membership through Active Directory / Entra ID groups synchronized via SAML SSO.
• Fulfils ServiceNow requests for Enterprise GitHub access, Active Directory group changes and GitHub runners, and maintains associated audit evidence.
• Provisions and governs service accounts and integrations using least-privilege principles; supports self-hosted and GitHub-hosted runners and runner groups in line with the company’s runner governance model.
• Performs recurring platform hygiene activities, including monthly dormant-account reviews, compliance and audit-log reporting, and Microsoft Defender for Cloud linkage for each organization.
• Configures and monitors enterprise budgets, spending limits and alerts, and produces license consumption and usage reports.
• Supports onboarding and transition of service provider (AMS) teams to the approved organization, team and repository structure.
• Maintains platform documentation, standard operating procedures and knowledge articles, and supports the GitHub user community.
Technical Administration, Integrations and Build Management
• Provides hands-on technical administration of the GHEC platform beyond request fulfilment, acting as a technical point of contact at the platform level for development and DevOps teams on source control, build and integration questions.
• Evaluates, installs, configures and supports pre-built integrations requested by teams, including GitHub Apps, GitHub Marketplace apps, OAuth apps and webhooks connecting GitHub to third-party tools (e.g. cloud platforms, collaboration, code quality and security tools); scopes permissions, manages credentials and troubleshoots connectivity and authentication issues.
• Diagnoses and resolves technical platform issues, such as failed workflows, runner problems, integration and authentication errors and API limits, escalating to GitHub Support where required.
• Administers GitHub Copilot Business at the enterprise and organization levels, including access, policies, usage monitoring and enterprise-managed settings.
• Supports the evaluation, configuration and governance of GitHub Copilot custom agents defined through Markdown-based agent profiles and related repository instructions.
• Participates in approved investigation and testing of integration opportunities between Jira Rovo and GitHub Copilot, including security, data-access and governance considerations.
GitHub Advanced Security (GHAS) Administration
• Administers GitHub Advanced Security (Secret Protection and Code Security) at the enterprise, organization and repository levels, including security configurations, CodeQL code scanning, secret scanning and push protection, Dependabot alerts and dependency review.
• Works with Cybersecurity and Cloud & Application Security to tune GHAS configurations, manage alert-dismissal and exception processes, and report on coverage and remediation metrics.
Repository Management and Jira Integration (SDLC Initiative)
• Supports the GitHub portion of the company’s Phase 1 SDLC and CI/CD platform initiative (Jira and GitHub), being designed and implemented by a System Integrator and led by the company’s Cloud Centre of Excellence (CCoE) Lead.
• Participates in design workshops and helps implement approved GitHub repository archetypes, templates, rulesets, branch protections, pull-request controls, code ownership standards, repository lifecycle controls and reusable GitHub Actions workflows.
• Configures, tests and supports the Jira-to-GitHub integration to provide traceability between Jira work items and branches, commits, pull requests, builds and deployments.
• Participates in platform, integration and security-control testing, receives knowledge transfer from Deloitte, and transitions the delivered GitHub configuration into ongoing sustainment.
• Supports pilot onboarding of application teams to the approved Jira and GitHub archetypes, operating procedures and CI/CD foundations.