3 hours ago
Sydney, AustraliaStaff+
Responsibilities
- Design and establish a GitHub Enterprise Cloud environment using Enterprise Managed Users.
- Integrate GitHub with identity providers through authentication, SSO, SCIM provisioning, and user lifecycle management.
- Configure organisations, enterprise roles, teams, repository permissions, access controls, governance rulesets, audit logging, and privileged access controls.
- Plan and execute trial, pilot, and production migrations across organisations and repositories using GitHub Enterprise Importer and supported tools.
- Reconfigure GitHub Actions, secrets, variables, environments, GitHub Apps, webhooks, and third-party integrations.
- Design scalable self-hosted runner infrastructure using Actions Runner Controller, runner scale sets, and ephemeral runners.
- Use Terraform to manage GitHub Enterprise configuration and runner infrastructure on EKS.
- Troubleshoot migration, identity integration, workflow execution, job routing, scaling, and network connectivity issues.
- Produce architecture documentation, migration runbooks, technical decision records, and operational handover materials.
- Partner with Cyber Security, Identity and Access Management, Cloud, Engineering, leadership, and vendor stakeholders.
- Provide implementation, testing, and control evidence for security reviews and audit requirements.
Requirements
- Hands-on experience setting up GitHub Enterprise Cloud with Enterprise Managed Users.
- Strong knowledge of SSO, identity provider integration, SCIM provisioning, and user lifecycle management.
- Proven experience delivering multi-organisation GitHub Enterprise Cloud migrations.
- Strong GitHub Enterprise administration, repository governance, and access control experience.
- Experience building secure, scalable self-hosted runner infrastructure using Actions Runner Controller and ephemeral runners.
- Strong Terraform experience managing GitHub Enterprise configuration and runner infrastructure on EKS.
- Knowledge of GitHub Enterprise and runner hardening aligned with ISM requirements.
- Experience migrating GitHub Apps, webhooks, secrets, credentials, and third-party integrations.
- Strong automation and troubleshooting capability across GitHub, identity, migration, and runner infrastructure.
- Ability to communicate clearly with engineering, cyber security, identity, leadership, and vendor stakeholders.
- Experience in financial services or another highly regulated environment is advantageous.
- Familiarity with APRA CPS 234 and security assurance requirements is advantageous.
- Experience producing technical evidence for risk closure, security reviews, and audits is advantageous.
- GitHub Certified Administrator or Certified Kubernetes Administrator certification is advantageous.
Benefits
- Flexible hybrid working arrangements.
- Opportunities to work with modern cloud, DevSecOps, and platform technologies.
- IGNITE recognition program celebrating individual and team achievements.
- Comprehensive physical, mental, and financial wellbeing initiatives.
- Ongoing learning and development opportunities.
- Work on technology initiatives supporting critical payment infrastructure across Australia.
Tech Stack
Categories
About Cuscal
Cuscal builds payment and regulated data services for Australian banks, mutuals, fintechs and corporates, including card issuing, merchant acquiring, EFTPOS switching and access to the New Payments Platform. Its offerings support debit and credit cards, mobile banking and real-time account-to-account payments, sold as B2B services and platform integrations. Founded in 1966 and headquartered in Sydney, it enables institutions to connect to national payment rails and Consumer Data Right ecosystems.