Role Description We are seeking a Staff Site Reliability Engineer to join GitHub’s expanding IT Engineering team. This role is crucial for supporting our global workforce, known as Hubbers, who rely on our internal systems and services daily. You will be responsible for providing essential support, developing and maintaining internal tooling, and configuring systems to ensure Hubbers operate efficiently and without obstacles. You will primarily focus on Client Platform Engineering (CPE). You will need strong skills in Endpoint Device Management, such as Jamf and Intune, automation, and creative problem-solving using code and GitHub. You should have a deep understanding of modern management tools for OS configuration, patching, and compliance. As a globally distributed company, GitHub relies on asynchronous communication. Therefore, strong communication skills and empathy are essential. Proficiency with Git and GitHub is also required. Responsibilities - Directly Responsible Individual for CPE - guide the approach and execution of the CPE team. - Endpoint management: Partner with the Security organization on creating, managing, and maintaining policies, configuration profiles, and security baselines for all of GitHub’s corporate endpoints (e.g., macOS, Windows, iOS, Linux). - Provide expert understanding of systems integration architecture in applicable platforms and sets system strategy. - Lead and develop long-term strategies and plan capacity for meeting future end user needs. - Identify opportunities for automation - driving development and implementation in partnership with a project manager and stakeholders. - Provide technical leadership, mentorship, pairing opportunities, and code reviews to encourage the growth of others; support teams in producing extensible and maintainable code/configuration, ensuring integration with downstream dependencies and adherence to quality standards. - Champion operational excellence by improving system reliability, reducing incident response times, and establishing best practices for monitoring, alerting, and runbooks across IT Engineering services. - Lead teams to collaborate on their end goals for systems to drive and achieve desirable user experiences. - Drive collaboration across IT, security, and engineering to solve complex endpoint issues and optimize device performance. Qualifications - 9+ years experience in computer science, or related technical discipline with proven experience coding in relevant languages (e.g., Java, JavaScript, Python) OR Bachelor's Degree in Computer Science or related field AND 7+ years experience in computer science, or related technical discipline with proven experience coding in relevant languages (e.g., Java, JavaScript, Python) OR Master's Degree in Computer Science or related field AND 5+ years experience in computer science, or related technical discipline with proven experience coding in relevant languages (e.g., Java, JavaScript, Python) OR equivalent experience. - 4+ years’ experience in Client Platform Engineering and at least 3 years in leading engineering solutions (design to implementation) at scale. - 4+ years’ experience with client device lifecycle management for macOS, Windows, or Linux using MDM frameworks (e.g. Jamf, Microsoft Intune, etc.) or IaC tools (e.g. Terraform, Ansible, Puppet, Salt, etc.). - 3+ years’ experience with automation and tool development using GitHub, Python, Bash, Shell scripting, or PowerShell. Preferred Qualifications - 3+ years technical leadership experience. - Experience working within cloud environments such as AWS, Azure, or GCP; preferably Azure. - A self-starter with strong analytical and creative problem-solving skills. - Strong infrastructure knowledge, including cloud computing, Kubernetes, and containerization. - Strong soft skills, including stakeholder communication and cross-functional collaboration. Compensation Range The base salary range for this job is USD $121,800.00 - USD $323,200.00 /Yr. These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role. GitHub Values - Customer-obsessed - Ship to learn - Growth mindset - Own the outcome - Better together - Diverse and inclusive Leadership Principles - Create clarity - Generate energy - Deliver success EEO Statement GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

• Own and evolve CI/CD pipelines using GitHub Actions and OIDC-based authentication for microservices and agentic workloads, with safe, fast, and reversible deployments. • Automate infrastructure provisioning using Infrastructure as Code (IaC) tools such as Terraform and CloudFormation. • Operate and scale our Kubernetes platform (EKS + Argo CD), including autoscaling, ingress, external-dns, cert-manager, External Secrets Operator, backups, runtime guardrails, and multi-tenant isolation for enterprise customers. • Manage the edge and network perimeter, including Cloudflare (CDN, WAF, Bot Management, DDoS protection, Zero Trust / Access), CloudFront, API Gateway, ALB/NLB, Route 53, and network security controls. • Operate the data and event tier, including Aurora MySQL, ElastiCache/Redis, S3, and MSK (Kafka), with responsibility for backups, point-in-time recovery (PITR), and multi-AZ disaster recovery aligned to defined RTO/RPO objectives. • Build and maintain Lambda workloads where event-driven or serverless architectures are the right fit. • Build observability as a product using Prometheus, Grafana, and OpenTelemetry, including telemetry for LLM and agentic systems such as token cost, tool-call latency, evaluation signals, and prompt/version tracking. • Strengthen our security and compliance posture for SOC 2 and HIPAA, including least-privilege IAM, SCPs, secrets management, SAST/DAST, dependency and container scanning, image signing, AWS Config, Security Hub, GuardDuty, Inspector, and evidence automation. • Drive FinOps initiatives, including tagging standards, Savings Plans and Reserved Instances, per-tenant and per-workload cost attribution, and LLM cost controls. • Build and evolve our AI-native DevOps capabilities.

• Proactively monitor and analyse platform performance. • Collaborate with engineering teams to address performance bottlenecks and ensure scalability. • Assist engineering teams with implementing and reviewing SLOs • Continually improve observability through monitoring and alerting, and dashboards, using tools such as DataDog or Prometheus for example. • Work with other teams to ensure it is effective and provides full coverage. • Ensure the service is highly available and resilient • Champion best practices in design for high availability • Devise runbooks and run game sessions to test our DR plan, H/A and backups • Conduct assessments of capacity and plan for scaling to meet current and future business needs. • Work closely with the Head of Platform Engineering and Head of SRE to strategize and implement scalable solutions. • Work closely with the Platform team, feature teams and, 2nd line support and other stakeholders to ensure a good level of service is provided for our customers and embed SRE practices. • Key player in the response and troubleshooting of incidents, ensuring rapid resolution and minimising downtime. • Participate in blameless postmortems to identify root cause and corrective actions • Develop and maintain playbooks and documentation

• Work primarily with on‑premise infrastructure (bare metal and VMs): setup, maintenance, troubleshooting • Drive clarity in ambiguous situations by defining requirements, assumptions, and next steps • Own automation projects end‑to‑end (design → rollout → maintenance) • Improve how we operate: harden and tune systems and also improve the way the team works in terms of operational hygiene • Keep the platform stable, fast, and secure: servers, web servers, databases, queues • Investigate production incidents across OS / networking / infrastructure layers, apply temporary mitigations, coordinate with developers and participate in post‑mortems • Participate in on‑call rotations • Use AI in all aspects of day‑to‑day work: researching, troubleshooting, developing