Role SummaryWe are looking for an experienced GitHub Platform Architect to own the target-state architecture and operating model for the customer's GitHub Enterprise platform.

The ideal candidate will treat GitHub as an enterprise engineering platform, rather than simply a code repository, with ownership across governance, security, automation, developer experience, DevSecOps, and AI-assisted engineering.

The architect will also act as a bridge between GitHub's evolving product capabilities and the customer's engineering roadmap, continuously tracking GitHub's public roadmap, changelog, previews, and new capabilities to identify opportunities for adoption, piloting, or deferral.

Key ResponsibilitiesGitHub Enterprise Architecture &

- Governance

- Own the end-to-end architecture and operating model for GitHub Enterprise Cloud and/or Server.
- Define enterprise/org topology, repository structures, naming conventions, ownership standards, and multi-tenant separation.
- Design and enforce platform governance using rulesets, branch protection, CODEOWNERS, required reviews, environments, and deployment gates.
- Manage enterprise licensing, audit requirements, and audit-log streaming into customer SIEM platforms.

Identity & • Access Management
- Architect enterprise-scale identity and access management using SAML/OIDC SSO, SCIM provisioning, and Enterprise Managed Users (EMU).
- Define team structures, RBAC models, access governance, and least-privilege principles.

GitHub Actions & • CI/CD Architecture
- Define enterprise GitHub Actions architecture, including:
- Reusable workflows and composite actions
- Self-hosted and ephemeral runners
- Actions Runner Controller (ARC) on Kubernetes
- Runner capacity, cost, and scalability models
- GitHub Packages and artifact management
- Establish standards for secure and scalable CI/CD.

DevSecOps & • GitHub Advanced Security
- Lead secure SDLC architecture using GitHub Advanced Security (GHAS).
- Implement and govern:
- Code scanning and CodeQL
- Custom CodeQL queries




- Secret scanning and push protection
- Dependency review
- Software supply-chain security
- SBOM, provenance, and artifact signing
- Establish policy-as-code and security guardrails using OPA or equivalent technologies.

GitHub Copilot & • AI-Assisted Engineering
- Architect and govern GitHub Copilot adoption across the enterprise.
- Define licensing strategy, usage policies, content-exclusion controls, IP/data-handling guardrails, and security requirements.
- Establish adoption and engineering-impact metrics.
- Evaluate and enable newer agentic and AI-assisted engineering capabilities.

GitHub Migration & • Consolidation
- Lead large-scale migrations from Bitbucket, GitLab, Azure DevOps, or SVN to GitHub.
- Define migration tooling, repository/history migration strategy, cutover sequencing, rollback planning, and legacy platform decommissioning.

Roadmap & • Product Advisory
- Maintain a continuous view of the GitHub public roadmap, changelog, betas, and feature previews.
- Evaluate upcoming capabilities based on business value, technical readiness, security, risk, and licensing impact.
- Publish a rolling GitHub capability adoption roadmap for platform leadership.
- Engage with GitHub/Microsoft product and field teams for feature requests, private previews, and customer requirements.

Platform Reliability & • Integrations
- Act as the design authority and escalation point for:
- Platform reliability and scalability
- Disaster recovery and backup
- API rate-limit management
- Enterprise integrations
- REST and GraphQL APIs
- Webhooks and GitHub Apps
- Define scalable and reliable integration patterns.

Technical Leadership




- Coach platform engineers and Developer Experience (DevEx) teams.
- Create reference architectures, platform standards, guardrails, and technical documentation.
- Develop enablement material and drive adoption of enterprise GitHub best practices.

Required SkillsMust Have
- 10–14 years of overall technology experience with 4+ years of architect-level GitHub Enterprise experience.
- Proven ownership of GitHub Enterprise at 1,000+ developer scale.
- Strong expertise in GitHub Actions architecture, including self-hosted and ephemeral runners.
- Hands-on experience with GitHub Advanced Security, including:
- CodeQL
- Secret scanning
- Push protection
- Dependency and supply-chain security
- Enterprise identity integration using:
- SAML/OIDC
- SSO
- SCIM
- Enterprise Managed Users
- RBAC and least-privilege access
- Proven experience providing roadmap-driven GitHub advisory and implementing new GitHub capabilities for enterprise customers.
- Strong experience with GitHub APIs, GitHub Apps, webhooks, REST/GraphQL, and platform automation.
- Experience managing GitHub Enterprise using Terraform or other IaC/automation frameworks.

High Priority
- Large-scale migration to GitHub from GitLab, Bitbucket, Azure DevOps, or SVN.
- Enterprise GitHub Copilot rollout, including governance, policy, licensing, and adoption measurement.
- Robust DevSecOps and secure SDLC architecture experience.
- Experience with policy-as-code, such as OPA or equivalent.

Medium Priority
- Kubernetes and container platforms.
- Cloud platform experience across Azure and/or AWS.
- InnerSource practices.
- DORA metrics and engineering productivity measurement.
- Developer Experience / Engineering Platform architecture.

Good to Have
- Previous experience with GitHub/Microsoft in product, solutions engineering, or field architecture roles.
- Open-source contributions to GitHub Actions, CodeQL, or the broader GitHub ecosystem.
- GitHub certifications in Advanced Security, Actions, or GitHub Administration.

📌 GitHub Platform Architect (India)
🏢 bytespoke
📍 India