2112 - 2113 GitLab Administrator / Platform Engineer

Position: GitLab Administrator / Platform Engineer

Location: Remote from LATAM

Contract Type: Full-time vendor (Contract directly with In All Media)

Time Zone Alignment: US Central Time (CT) overlap (6+ hours)

About In All Media

In All Media is a global technology and design firm focused on building impactful digital solutions through remote, distributed teams across LATAM. We partner with international clients across industries, providing long-term technical expertise, product innovation, and team augmentation. Contract Details: This is a 100% remote contractor position open to talent anywhere in LATAM. Your contract and engagement will be directly managed with In All Media.

Project Overview

In this role, you will drive the Service Account Security Migration & Licensing Optimization Initiative . You will play a pivotal role in strengthening platform security and optimizing licensing costs by migrating misconfigured user accounts to native platform service accounts, rotating embedded pipeline credentials, and establishing granular RBAC governance across complex GitLab automation environments. You will partner closely with distributed engineering and DevOps teams to ensure continuous pipeline reliability throughout this critical security cutover.

Key Responsibilities

• Service Account & Non-Human Identity Migration: Manually migrate 88 existing service accounts (currently misconfigured as standard user accounts) to native platform service accounts to close security gaps and optimize license consumption.
• Credential & Token Lifecycle Management: Rotate, replace, and configure API tokens, SSH keys, and service credentials within CI/CD pipelines and automation workflows, ensuring secure decommissioning of legacy access.
• Access Control & RBAC Governance: Update and replicate granular permissions, group access, and project-level scopes for newly created automation identities across the source-control platform.
• Pipeline & Integration Debugging: Troubleshoot, test, and resolve breaking CI/CD pipeline or automation integration issues that depend on non-human identities during token cutovers.
• Cross-Team Stakeholder Coordination: Partner with engineering, DevOps, and project-owning teams to untangle unclear resource ownership, verify pipeline functionality post-migration, and drive operational follow-ups to completion.
• Operational Ticket Execution: Process repetitive, parallel identity migration tasks and operational tickets systematically while maintaining audit trails.

Must-Have Skills

• GitLab Administration / Platform Engineering: Hands-on experience administering GitLab or enterprise VCS (Version Control System) platforms at scale.
• CI/CD Pipeline Automation: Direct experience building, maintaining, and debugging automated CI/CD pipelines and deployment workflows.
• Credential & Secrets Rotation: Proven background rotating, updating, and replacing credentials/tokens embedded in automation pipelines, alongside secure access decommissioning.
• Non-Human Identity / Service Account Management: Experience managing, migrating, or configuring service accounts, system users, and automation identities.
• Permissions & Access Management: Experience configuring RBAC (Role-Based Access Control), project permissions, and group-level access for automation accounts.
• Professional Seniority: Mid- to Senior-Level experience in DevOps, System Administration, or IAM (Identity and Access Management) engineering.

Nice-to-Have Skills

• Identity & Access Migrations: Direct experience with enterprise IAM migrations, permission replication, or platform token cutovers.
• Secrets Hygiene & Security Remediation: Experience identifying and remediating credential exposure or insecure account configurations.
• High-Volume Operational Ticket Management: Comfort handling repetitive, high-volume migration tasks across multiple teams/projects concurrently.
• Cross-Functional Communication: Strong interpersonal skills to resolve ambiguous resource ownership and coordinate with distributed technical teams.

Time Zone & Collaboration

This role requires a minimum overlap of 6 hours with US Central Time (CT) business hours during a standard 8-hour workday to collaborate effectively with distributed engineering teams.

Language

All interviews, technical documentation, daily team syncs, and operational communications will be conducted in English.