Role summary :
Be an integral part of our enterprise-scale migration from Bitbucket to Github Enterprise Cloud (GHEC), design and roll out GitHub Actions based CI / CD, and establish secure, complaint, and observable build / release pipelines for a 300-developer organization in the healthcare domain. You will be the technical owner for source control strategy, build infrastructure, and release automation and an emphasis on reliability, speed, and HIPAA / SOC2 compliance.
What you'll do :
Plan & execute the migration :
- Inventory repos, pipelines, users, secrets, and integrations; define cutover strategy and rollback plans.
- Migrate code, issues and CI from Bitbucket to GHEC with minimal downtime, script repeatable migration runbooks.
- Normalize repository standards (branch naming, default branches, protection rules, CODEOWNERS, templates)
Design CI / CD on GitHub Actions :
Architect multistage pipelines (build->test- >security scans- >artifact publish- >deploy)Implement reusable workflows, composite actions, and organization-level workflow templates.Set up self-hosted runners and autoscaling runner fleets(containerized / ephemeral) for Linux / windows / macOS as needed.Establish secret management via OIDC to cloud providers; remove long live credentials.Security & compliance for healthcare :
Enable GitHub Advanced security (Code scanning, Dependabot, secret scanning)Enforce SSO / SAML, branch protection, required checks, signed commits, and PR review policies.Implement policy-as-code (e.g., Open policy agent, repo / rule sets), change-management controls, and audit-ready logs.Ensure pipelines and artifacts are aligned with HIPAA, SOC2, GDPR and least privilege principles avoid PHI in logs.Build & release engineering :
Standardize build images, caching, and artifact storage; speed up CI with dependency caches and test parallelization.Create environment promotion flows (dev / stage / prod) with approvals and progressive delivery (canary / blue green)Integrate QA automation, performance tests, and SAST / DAST into pipelines.Observability & reliability :
Define and track DORA metrics (lead time, deployment frequency, MTTR, change failure rate)Add telemetry for pipeline duration, queue times, and flake rates; publish dashboards and SLAs for CI.Change management & enablement :
Drive communications, training, and documentation; run office hours and migration pilots.Partner with security, compliance, SRE, and product teams;Required Qualifications :
6+ years in Build / Release / DevOps / Platform Engineering; 2+ years leading large SCM / CI migrations.Proven previous experience of migrating code from Bitbucket to GitHub Enterprise cloud.Expert with Git, GitHub Enterprise Cloud and GitHub Actions at organization scale.Proven experience running self-hosted / ephemeral runners and tuning CI performance.Strong CI / CD for polyglot stacks (Java / Kotlin, .NET, Node, Python, mobile)Hands on with artifact registries (GitHub packages / Artifactory), Iac (Terraform), containers (Docker), and one major cloud (AWS / Azure / GCP) preferably Azure.Security background : branch protection, CODEOWNERS, signed artifacts, SBOMs, dependency governance, secrets handling (ODIC)Healthcare or other regulated industry experience; understanding of HIPAA controls and audit requirements.Excellent scripting (Bash / PowerShell) and one high level language (Python / Go)Bitbucket to GitHub migrations using enterprise importers; Jira / GitHub Projects integrations.(ref : hirist.tech)