EXPLORE PREMIER
OPPORTUNITIES

Build Engineer

Outdefine

1-10

United States

About the job

Overview:

Project Experience Required
A strong candidate should have led or contributed to projects involving:
Build & Release Engineering (Core requirement as per my meeting with the QA Director)
Standardizing build images and caching strategies.
Creating environment promotion flows (dev → stage → prod).
Integrating QA automation and security testing (SAST/DAST).
Source Control Migration Projects (Core requirement as per my meeting with the QA Director)
Migrating from Bitbucket to GitHub Enterprise Cloud (GHEC).
Planning cutover strategies, rollback plans, and scripting migration runbooks.
CI/CD Pipeline Design & Implementation
Architecting multistage pipelines using GitHub Actions.
Implementing reusable workflows and composite actions.
Managing self-hosted runners (Linux/Windows/macOS).
Security & Compliance in Regulated Environments
Implementing GitHub Advanced Security features.
Enforcing SSO/SAML, signed commits, and PR policies.
Ensuring HIPAA, SOC2, GDPR compliance in build/release pipelines.
Observability & Reliability
Tracking DORA metrics and pipeline telemetry.
Publishing dashboards and SLAs for CI performance.
Change Management & Enablement
Leading training, documentation, and migration pilots.
Collaborating with security, SRE, and product teams.

Mandatory Skills
These are explicitly required in the JD:
GitHub Enterprise Cloud & GitHub Actions (organization-level expertise)
Bitbucket to GitHub migration experience
CI/CD for polyglot stacks (Java/Kotlin, .NET, Node, Python, mobile)
Self-hosted/ephemeral runners setup and performance tuning
Artifact registries (GitHub Packages, Artifactory)
Infrastructure as Code (Terraform)
Containers (Docker)
Cloud platforms (preferably Azure; AWS/GCP acceptable)
Security practices: CODEOWNERS, signed artifacts, SBOMs, OIDC for secrets
Regulated industry experience (especially healthcare)
Scripting: Bash/PowerShell
Programming: Python or Go
Jira/GitHub Projects integration

Nice-to-Have Skills
These are beneficial but not strictly required:
Open Policy Agent (OPA) or similar policy-as-code tools
Autoscaling runner fleets (containerized/ephemeral)
Progressive delivery strategies (canary, blue-green deployments)
Test parallelization and dependency caching
DORA metrics tracking and CI observability dashboards
Experience with SOC2, GDPR beyond HIPAA
Experience in other regulated industries (e.g., finance, government)