SSCS handbook: AuthZ EM @jpr0c + PM @NellyVahab, Pipeline Security acting EM @mmishaev

Mark Mishaevrequested to merge
authz-em-update-jpr0c into main

What does this MR do?

Updates SSCS handbook ownership to reflect manager-of-record and PM changes:

  1. Authorization EM — moves from @ajaythomasinc to @jpr0c (Jordon Proctor)
  2. Authorization PM — moves from @jrandazzo to @NellyVahab (Nelly Vahab)
  3. Pipeline Security — @ken.mcdonald is replaced by @mmishaev (Mark Mishaev) as acting EM while a permanent EM is identified

Changes

  • _index.md — team-by-manager-slug shortcodes for Authorization (manager=\"jpr0c\") and Pipeline Security (manager=\"mmishaev\") so the auto-generated team listings pull the correct directs from Workday.
  • authorization.md — both "tag the EM/PM" instructions in the refinement workflow now point to @jpr0c and @NellyVahab.
  • oncall/rotation-leader.md, oncall/faq.md, oncall/time-off-and-holidays.md — SSCS Tier 2 on-call rotation leader references updated to @adil.farrukh, @jpr0c and @mmishaev, keeping the convention that rotation leaders are the EMs of Authentication, Authorization, and Pipeline Security.

Why

Jordon is taking over as EM and Nelly is taking over as PM for the Authorization team. Ken is no longer leading Pipeline Security and Mark is covering as acting EM. Workday manager-of-record changes are already in flight; this MR makes the handbook reflect the new ownership so internal tagging, the auto-generated team page, and on-call coordination route to the right people.

Notes

  • The team-by-manager-slug shortcode auto-populates from Workday, so the Authorization and Pipeline Security team lists will fill in once Workday has the new managers of record.
  • The CI Job Token design document (architecture/design-documents/ci_job_token/_index.md) still lists @jrandazzo as a DRI alongside @jayswain. That field is a historical ownership record for a specific design and is intentionally left unchanged here. If Nelly should take over that DRI role, it can be done in a separate, deliberate change.
  • No "Auth Infrastructure" page exists in the handbook, so no removal needed there.
Edited by Mark Mishaev

Merge request reports