Pathway Platform Engineer

📋 Description

• Take ownership of the CI/CD platform for application delivery: design reusable pipeline templates, secure defaults, quality gates, and support developer enablement.

• Construct and manage infrastructure pipelines for environment lifecycle management, covering provisioning, promotion, drift detection, and controlled rollouts.

• Set up and uphold delivery governance through policy catalogs, change control, exception workflows, traceability, and audit evidence.

• Implement automated compliance and security checks within pipelines using policy-as-code and scanning, continuously enhancing signal quality.

• Facilitate safe releases at scale through zero-downtime deployment patterns, progressive delivery, feature flag integration, and standardized rollback and verification processes.

• Automate change management integrations with ServiceNow and CAB workflows to minimize manual overhead while ensuring controls and traceability are maintained.

• Manage and advance build infrastructure (runners/agents and build pools): oversee performance, reliability, hardening, patching, and cost management.

• Implement protections for the software supply chain, including artifact provenance/attestation, signing/verification, and private artifact repository patterns.

• Integrate DevSecOps tools into delivery flows and empower teams to address findings through reporting, triage, and automation.

• Develop internal automation (apps/bots) that streamline developer workflows and enforce standards with minimal friction.

• Offer standardized automated testing capabilities (acceptance, performance, resiliency/chaos, operational acceptance tests) as pipeline stages and quality gates.

• Support observability onboarding and standards with instrumentation guidance, dashboards-as-code, and alerting in collaboration with solution teams.

• Collaborate with SRE and operations to enhance reliability practices, availability policies, incident response, and on-call readiness.

⛳️ Requirements

• 6+ years of experience in designing, building, and operating CI/CD platforms for application delivery in enterprise settings (GitHub and/or Azure DevOps).

• 4+ years of experience in delivering infrastructure-as-code and automating the environment lifecycle using Terraform, including reusable modules and promoting across environments.

• Proven ability to implement pipeline governance, including policy-as-code, change control, exception handling, and producing audit-ready evidence.

• Hands-on experience with software supply chain controls, such as artifact provenance/attestation, signing/verification, and private artifact repositories.

• Experience in integrating delivery platforms with enterprise operational processes, including ServiceNow change automation and CAB integration.

• Strong automation and troubleshooting skills in Bash, PowerShell, and Python; capable of independently diagnosing pipeline, runner/agent, and environment failures.

• Demonstrated capability to lead technical decisions and drive adoption across teams through documentation, standards, and stakeholder alignment.

• Experience with GitHub Actions (reusable workflows, branch protections, required checks, CODEOWNERS) and runner/build pool operations, and/or Azure DevOps pipelines, agent pools, environments, and approvals.

• Familiarity with implementing policy-as-code (Kyverno and/or Sentinel) and enforcement patterns within pipelines.

• Experience in integrating DevSecOps tooling such as SonarQube and other scanning tools into delivery workflows.

• Background in observability onboarding and tooling such as AppInsights and Dynatrace, including dashboards-as-code and alerting standards.

• Knowledge of reliability practices including availability policies, incident response, and on-call readiness (e.g., PagerDuty).

• Experience with CAB process automation.

• Experience in building GitHub artifact attestation infrastructure.

• Experience managing Sentinel policy catalogs and change control.

• Experience in implementing acceptance and performance test infrastructure.

• Experience in developing policy bots or internal automation (e.g., Probot-style apps).

• Familiarity with LaunchDarkly or Flagger for progressive delivery.

🏝️ Benefits

• Selection process:

• Meeting with Gime from the Resilient Co. team.

• Client internal interview.

• KF interview.

• Final client interview.