Pravin Mohite

About Pravin Mohite

I work on developer platforms where scale, automation, and security collide — the layer where software delivery quietly breaks when velocity increases.My focus is not “running CI/CD” or “adding security tools.” It’s designing GitHub-centric delivery systems that continue to work as change volume, automation, and AI-assisted development accelerate.In practice, this means working deeply with GitHub Enterprise, CI/CD control planes, and security capabilities such as GitHub Advanced Security (GHAS) and Copilot-driven development workflows — not as standalone tools, but as enforcement points inside the delivery system.A recurring pattern I see: AI and automation don’t break software delivery — fragile pipelines do. As AI-assisted coding, Copilot suggestions, and emerging agentic patterns increase throughput, existing pipelines amplify mistakes unless they are redesigned for that reality.That’s where my work sits:* Treating CI/CD as a policy and control plane, not just automation* Shifting security and compliance enforcement pre-merge, not post-incident* Designing guardrails that scale with AI-driven change volume* Evaluating emerging integration patterns (including MCP-style architectures) for safe, auditable AI tool consumptionI gravitate toward teams that value:* Systems over heroics* Guardrails over after-the-fact fixes* Long-term resilience over short-term speedMy goal is simple: enable developer velocity without letting risk scale silently alongside it.

Experience

1. Senior Software Engineer

   Workday

   Jun 2022 — Present · Pune, IN

   I work on GitHub-centric developer platforms where delivery speed, security, and governance must scale together — especially as automation and AI-assisted development increase change volume.While GitHub is a primary interface, my work spans end-to-end delivery systems — including CI/CD architecture, security automation, policy enforcement, and cloud-native execution layers- Designed and evolved GitHub-based CI/CD control planes to support high-velocity development while enforcing consistent security and policy controls across teams- Shifted security and compliance enforcement pre-merge by embedding automated checks into delivery pipelines, reducing reliance on manual reviews and post-incident remediation- Integrated GitHub Advanced Security (GHAS) as a platform capability rather than a standalone tool, ensuring vulnerabilities and policy violations are surfaced early without slowing developer workflows- Adapted delivery pipelines to account for AI-assisted and Copilot-driven code generation, recognizing increased change frequency and redesigning guardrails to prevent silent scaling of risk- Identified recurring failure patterns where automation and speed amplified defects, and redesigned pipeline architecture to absorb blast radius through policy-as-code and automated enforcement- Evaluated emerging AI integration patterns (including MCP-style architectures) to understand how AI tools can be consumed safely, auditable, and consistently within enterprise developer platforms.

Education

• ATS's, SBGI, Miraj

  Bachelor of Engineering, Computer Science

  2013 — 2018