Staff Build Engineer

Growexx is seeking a Staff Build Engineer for one of its clients, who can be an integral part of their enterprise-scale migration from Bitbucket to Github Enterprise Cloud (GHEC), design and roll out GitHub Actions based CI/CD, and establish secure, compliant, and observable build/release pipelines for a 300-developer organization in the healthcare domain. The candidate will be the technical owner for source control strategy, build infrastructure, and release automation and an emphasis on reliability, speed, and HIPAA/SOC2 compliance.

Key Responsibilities

• Inventory repos, pipelines, users, secrets, and integrations; define cutover strategy and rollback plans.
• Migrate code, issues and CI from Bitbucket to GHEC with minimal downtime, script repeatable migration runbooks.
• Normalize repository standards (branch naming, default branches, protection rules, CODEOWNERS, templates)
• Architect multistage pipelines (build->test–>security scans–>artifact publish—>deploy)
• Implement reusable workflows, composite actions, and organization-level workflow templates.
• Set up self-hosted runners and autoscaling runner fleets(containerized/ephemeral) for Linux/windows/macOS as needed.
• Establish secret management via OIDC to cloud providers; remove long live credentials.
• Enable GitHub Advanced security (Code scanning, Dependabot, secret scanning)
• Enforce SSO/SAML, branch protection, required checks, signed commits, and PR review policies.
• Implement policy-as-code (e.g., Open policy agent, repo/rule sets), change-management controls, and audit-ready logs.
• Ensure pipelines and artifacts are aligned with HIPAA, SOC2, GDPR and least privilege principles avoid PHI in logs.
• Standardize build images, caching, and artifact storage; speed up CI with dependency caches and test parallelization.
• Create environment promotion flows (dev/stage/prod) with approvals and progressive delivery (canary/blue green)
• Integrate QA automation, performance tests, and SAST/DAST into pipelines.
• Define and track DORA metrics (lead time, deployment frequency, MTTR, change failure rate)
• Add telemetry for pipeline duration, queue times, and flake rates; publish dashboards and SLAs for CI.
• Drive communications, training, and documentation; run office hours and migration pilots.
• Partner with security, compliance, SRE, and product teams.
  
  

Education and Experience

• 6+ years in Build/Release/DevOps/Platform Engineering; 2+ years leading large SCM/CI migrations.
• Proven previous experience in migrating code from Bitbucket to GitHub Enterprise Cloud.
• Expert with Git, GitHub Enterprise Cloud, and GitHub Actions at an organizational scale.
• Proven experience running self-hosted/ephemeral runners and tuning CI performance.
• Strong CI/CD for polyglot stacks (Java/Kotlin, .NET, Node, Python, mobile)
• Hands-on with artifact registries (GitHub packages/Artifactory), Iac (Terraform), containers (Docker), and one major cloud (AWS/Azure/GCP), preferably Azure.
• Security background: branch protection, CODEOWNERS, signed artifacts, SBOMs, dependency governance, secrets handling (ODIC)
• Healthcare or other regulated industry experience; understanding of HIPAA controls and audit requirements.
• Excellent scripting (Bash/PowerShell) and one high-level language (Python/Go)
• Bitbucket to GitHub migrations using enterprise importers; Jira/GitHub Projects integrations.
  
  

Analytical and Personal Skills

• Must have good logical reasoning and analytical skills.
• Good Communication skills in English – both written and verbal.
• Demonstrate Ownership and Accountability of their work.
• Attention to detail