Skip to content

DevOps Offboarding Template

This page describes the DevOps offboarding template and how it should be used.

The template is a trackable checklist for removing a departing (or role-changing) person’s access from: - core platforms (SSO, Git, CI/CD, Kubernetes, secret stores) - cloud providers (Cloudflare, AWS, GCP) - infrastructure access paths (SSH keys, bastions, shared accounts) - related DevOps SaaS accounts (certificate tracking, search services, registries)

Its goal is to ensure access is removed in a consistent order, reduce “hidden ownership” risks (e.g., DNS or vendor accounts tied to an individual), and capture evidence for audit/compliance needs.

Use the template file below to start a new offboarding record: