The position is described below. If you want to apply, click the Apply button at the top or bottom of this page. You'll be required to create an account or sign in to an existing one.
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
RegularLanguage Fluency: English (Required)
Work Shift:
1st Shift (United States of America)Please review the following job description:
CRC Group is seeking a Senior DevOps Engineer to own three tightly connected pieces of our platform: administration and governance of GitHub Enterprise, infrastructure-as-code design using Terraform, and the CI/CD pipelines and cloud deployment architecture that move code from development to production on Microsoft Azure.The successful candidate combines hands-on GitHub Enterprise administration with strong DevOps engineering skills — Terraform, GitHub Actions and Azure DevOps Pipelines, cloud-native deployment on Azure — and sufficient coding ability to build the automation and integrations the platform needs. They are motivated to bring AI-assisted development (GitHub Copilot, AI agents, Model Context Protocol services) into the workflow safely and at scale, and can partner effectively with cloud engineers, network engineers, security engineers, software developers, and identity/access governance professionals.
Essential Responsibilities
GitHub Enterprise Administration & Governance
Administer GitHub Enterprise Cloud at the enterprise and organization level: enterprise settings, organization structure, teams, roles, and permission models.
Own identity integration with Microsoft Entra ID, including SAML SSO, SCIM provisioning, and Enterprise Managed Users (EMU) where applicable; manage the join/move/leave lifecycle and periodic access reviews.
Define and enforce repository governance through rulesets, branch protection, required reviews, CODEOWNERS, commit signing, and repository creation/visibility policies.
Govern GitHub Apps, OAuth apps, personal access tokens (fine-grained PATs), deploy keys, and third-party integrations; maintain an approval and review process for new connectors.
Configure and operate GitHub Advanced Security: code scanning (CodeQL), secret scanning with push protection, Dependabot alerts and updates, and security overview reporting.
Infrastructure as Code & Platform Engineering
Design and codify platform infrastructure as Terraform modules — repositories, teams, rulesets, Actions and Azure DevOps configuration — with disciplined state management and module design, so platform changes are reviewable, versioned, and repeatable rather than made by hand.
Design and operate the runner strategy: GitHub-hosted, larger runners, and self-hosted runners (including Actions Runner Controller on Kubernetes or Azure VM scale sets), with hardening, patching, and scaling.
Implement keyless cloud authentication from pipelines using OpenID Connect (OIDC) federation to Azure; eliminate long-lived credentials from CI/CD.
Manage pipeline secrets and environments (GitHub Environments, Azure Key Vault integration), deployment approvals, and protection rules.
Implement software supply-chain controls: dependency review, SBOM generation, artifact attestation/provenance, and pinned action versions.
CI/CD Engineering & Deployment
Design, build, and maintain reusable GitHub Actions workflows, composite actions, and reusable workflow libraries that standardize build, test, security scan, and deployment stages across teams.
Administer Azure DevOps (organizations, projects, agent pools, service connections, Pipelines) and lead migrations or coexistence strategies between Azure DevOps and GitHub.
Define branching, release, and versioning strategies with development teams; support monorepo and polyrepo patterns as needed.
Build integrations between GitHub and enterprise systems (Entra ID, ServiceNow/ITSM, Azure Monitor, Teams, security tooling).
Troubleshoot pipeline failures, runner issues, and platform incidents; act as escalation point for GitHub-related production issues.
Development, Automation & AI Enablement
Develop scripts and internal tooling against the GitHub REST and GraphQL APIs to automate administration, reporting, and compliance.
Evaluate and pilot AI-enabled development capabilities — Copilot features, AI agents, and MCP services — and define the guardrails for their use in the platform.
Produce and maintain platform documentation, runbooks, architecture decision records, and developer onboarding guides.
Participate in Agile ceremonies and collaborate with architects, security engineers, and business stakeholders to prioritize platform work.
Required Qualifications
Experience
5+ years in DevOps, platform engineering, or software engineering roles.
Experience administering GitHub Enterprise (Cloud or Server) at the organization or enterprise level in a multi-team environment.
Demonstrated experience designing, building, and supporting production CI/CD pipelines, including infrastructure-as-code with Terraform.
Experience integrating source control platforms with an enterprise identity provider (SSO/SCIM).
Experience working within Agile development teams.
GitHub Enterprise Skills
Enterprise and organization administration, roles, and permission models.
Rulesets, branch protection, CODEOWNERS, and repository governance.
GitHub Actions: workflow authoring, reusable workflows, runner management.
GitHub Advanced Security (code scanning, secret scanning, Dependabot).
GitHub REST and GraphQL APIs; GitHub CLI.
Audit log, security overview, and enterprise reporting.
Infrastructure as Code & DevOps Skills
Terraform and Infrastructure as Code principles, including state management and module design — required, hands-on experience.
Secrets management and pipeline identity (OIDC federation, Azure Key Vault).
Azure DevOps administration and Pipelines.
Containers and container registries; familiarity with Kubernetes for runner hosting.
Git internals and branching/release strategies.
Programming Skills
Comfortable scripting in at least one of Python, PowerShell, or JavaScript/TypeScript (Node.js) to support automation and tooling work. Deep software engineering skill is not the primary focus of this role.
Communication
Strong written and verbal communication; able to write clear policy, runbooks, and technical documentation.
Able to explain platform and security decisions to both engineers and non-technical stakeholders.
Strong problem-solving and analytical skills.
Location: This position can sit hybrid in Dallas, Charlotte, Raleigh or Atlanta.
General Description of Available Benefits for Eligible Employees of CRC Group: At CRC Group, we're committed to supporting every aspect of teammates' well-being – physical, emotional, financial, social, and professional. Our best-in-class benefits program is designed to care for the whole you, offering a wide range of coverage and support. Eligible full-time teammates enjoy access to medical, dental, vision, life, disability, and AD&D insurance; tax-advantaged savings accounts; and a 401(k) plan with company match. CRC Group also offers generous paid time off programs, including company holidays, vacation and sick days, new parent leave, and more. Eligible positions may also qualify for restricted stock units and/or a deferred compensation plan.
CRC Group supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. CRC Group is a Drug Free Workplace.
EEO is the Law Pay Transparency Nondiscrimination Provision E-Verify
Skills Required
- 5+ years of experience in DevOps, platform engineering, or software engineering roles
- Experience administering GitHub Enterprise Cloud or Server at the organization or enterprise level in a multi-team environment
- Production CI/CD pipeline design, implementation, and support experience
- Hands-on Terraform and infrastructure-as-code experience, including state management and module design
- Experience integrating source control platforms with an enterprise identity provider using SSO and SCIM
- Experience working within Agile development teams
- GitHub Enterprise administration, permissions, repository governance, rulesets, branch protection, and CODEOWNERS
- GitHub Actions workflow authoring, reusable workflows, and runner management
- GitHub Advanced Security experience, including code scanning, secret scanning, and Dependabot
- Experience with GitHub REST and GraphQL APIs, GitHub CLI, audit logs, and enterprise reporting
- Experience with secrets management, OIDC federation, and Azure Key Vault
- Azure DevOps administration and Pipelines experience
- Experience with containers and container registries
- Familiarity with Kubernetes for runner hosting
- Git internals and branching or release strategy experience
- Comfortable scripting in Python, PowerShell, or JavaScript/TypeScript with Node.js
- Strong written and verbal communication skills
- Strong problem-solving and analytical skills
CRC Insurance Services Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about CRC Insurance Services and has not been reviewed or approved by CRC Insurance Services.
-
Leave & Time Off Breadth — Time off is described as generous, with paid holidays, vacation, sick days, and new parent leave offered. PTO and well‑being hours are often highlighted as standouts.
-
Retirement Support — Retirement support includes a 401(k) plan with a company match and tax‑advantaged savings accounts. Feedback suggests these elements provide steady long‑term value.
-
Strong & Reliable Incentives — Bonuses, including year‑end awards and incentive pay in some roles, are presented as a meaningful part of total compensation. Feedback suggests production‑linked roles can realize notable bonus upside.
CRC Insurance Services Insights
What We Do
CRC Group is one of the largest wholesale insurance distributors in the U.S. CRC Group consists of three divisions, Commercial Solutions, Group & Individual Solutions, and Specialty Programs. The CRC Group family of brands includes CRC, TAPCO, Insurisk, CRC Programs, 5Star, The ABC Program, Negley, Professional Insurance Concepts, Pro-Praxis, SHU, Target, JH Blades, CRC Voluntary Benefits, Ethos Underwriting Services, and Hanleigh. CRC Group’s insurance offerings and practice groups range from commercial property, casualty, professional lines, small business, transportation, environmental, construction, energy, healthcare, hospitality, manufacturing & distribution, public entity, and real estate, to personal lines, disability, voluntary benefits, and more. CRC Group has the largest collection of actionable data in the wholesale business and we are putting it to use to consistently deliver better outcomes and more efficient results for our clients. We leverage data to provide a better client experience through limits benchmarking reports, amendatory endorsements, comparison tools, form review library, and property risk assessment reports. We have unveiled the REDY platform, which uses data and analytics to help clients win. In addition, we offer products exclusively available from CRC Group through our Insurisk brand. Our Claims Advocacy team is another way we strive to enhance the client experience, our dedicated team is ready to assist even after the policy is placed, we are here to help in the event of a difficult claim, as well. These are just some of the ways CRC Group is placing you first.
