#108 - GitLab管理员/平台工程师 - 服务账户迁移
#108 - GitLab Administrator / Platform Engineer - Service Account Migration
Overview
我们正在寻找两名具备实战经验的 GitLab 管理员/平台工程师，参与一项临时的、有明确范围的迁移项目。工作重点是将现有的自动化身份转换为 GitLab 原生服务账户，同时保留依赖的 CI/CD 流水线、权限和操作连续性。企业经验优先。
Key Responsibilities
· 将指定的服务账户组合逐步迁移到 GitLab 原生服务账户，每次迁移一个账户。
- 在每个自动化身份切换时，轮换或替换凭证和令牌。
- 在成功验证后，安全地停用旧的凭证和访问权限。
- 更新已迁移自动化身份的权限和组/项目访问权限。
- 诊断并解决由凭证、令牌、权限或身份变更导致的 CI/CD 或自动化故障。
- 与负责受影响自动化的团队协调迁移时间、验证和后续跟进。
- 支持在限定时间内完成访问修复项目，确保安全可靠。
Must-Have Skills
· 具备 GitLab 管理或平台工程的实战经验。
- 具备 CI/CD 流水线和自动化工具的经验。
- 具备在自动化流程中轮换或替换凭证和令牌的经验。
- 具备在凭证或身份切换后安全停用旧访问权限的经验。
- 具备调试依赖服务凭证的 CI/CD 或自动化集成的经验。
- 具备迁移服务账户或其他非人类身份的经验。
- 具备更新自动化身份权限和组/项目访问权限的经验。
- 中级到高级水平的经验。
Nice-to-Have Skills
· 具备身份和访问迁移的经验。
- 具备秘密管理或凭证暴露修复的经验。
- 具备在多个相似账户或工单上准确执行重复操作的经验。
- 在 GitLab 或类似源代码管理平台上有过服务账户迁移、权限复制或令牌切换的经验。
- 具备理清不明确的所有权并推动跨多个团队的后续跟进的能力。
Required Tools & Platforms
· GitLab
- GitLab 原生服务账户或类似的非人类身份模型
- CI/CD 流水线和自动化工具
- 凭证和令牌管理流程
- 组/项目权限和访问控制
Location, Time & Engagement
· 候选人必须位于符合条件的拉美地区。
- 需要每周 40 小时的可用性。
查看英文原文
Overview
We are seeking two hands-on GitLab Administrators / Platform Engineers for a temporary, bounded migration initiative. The work centers on converting existing automation identities into GitLab native service accounts while preserving dependent CI/CD workflows, permissions, and operational continuity.
Enterprise experience strongly preferred.
Key Responsibilities
· Migrate a defined portfolio of existing service accounts to GitLab native service accounts, one account at a time.
- Rotate or replace credentials and tokens as each automation identity is cut over.
- Securely decommission old credentials and access after successful validation.
- Update permissions and group/project access for migrated automation identities.
- Diagnose and resolve CI/CD or automation failures caused by credential, token, permission, or identity changes.
- Coordinate migration timing, validation, and follow-up with the teams that own the affected automation.
- Support secure, reliable completion of a time-bounded access-remediation initiative.
Must-Have Skills
· Hands-on GitLab administration or platform engineering experience.
- Experience with CI/CD pipelines and automated tooling.
- Experience rotating or replacing credentials and tokens in automation workflows.
- Experience securely decommissioning old access after a credential or identity cutover.
- Experience debugging CI/CD or automation integrations that depend on service credentials.
- Prior experience migrating service accounts or other non-human identities.
- Experience updating permissions and group/project access for automation identities.
- Mid-to-senior-level experience.
Nice-to-Have Skills
· Experience with identity and access migrations.
- Experience with secrets hygiene or credential-exposure remediation.
- Experience executing repetitive operational work accurately across many similar accounts or tickets.
- Prior service-account migrations, permission replication, or token cutovers in GitLab or a similar source-control platform.
- Ability to untangle unclear ownership and drive follow-up across multiple teams.
Required Tools & Platforms
· GitLab
- GitLab native service accounts or comparable non-human identity models
- CI/CD pipelines and automated tooling
- Credential and token management workflows
- Group/project permissions and access controls
Location, Time & Engagement
· Candidates must be based in an eligible LATAM location.
- Availability for 40 hours per week is required.
- Working-hour alignment with U.S. time zones from Eastern through Pacific is required.