Principal Software Supply Chain Security Architect

GitLab; Canada; Remote; CAD 157,900 - 338,400; Full time

Benefits offered by this job

Benefits to support health and well-being

Flexible Paid Time Off

Equity Compensation & Employee Stock Purchase Plan

Home office support

Job summary

A leading software development firm is seeking a Principal Engineer for Software Supply Chain Security. In this role, you will lead the strategy for securing software delivery on the platform. Responsibilities include architectural leadership across teams, collaboration on CI/CD security initiatives, and mentoring engineers. Ideal candidates have deep expertise in supply chain security, knowledge of CI/CD practices, and experience with Go or Rust. This role is remote, offering a competitive salary and various benefits including health support and paid time off.

Qualifications

• Expertise in threat modeling for supply chain attack vectors.
• Knowledge of SLSA implementation and attestation systems.
• Ability to design resilient CI/CD platforms.

Responsibilities

• Lead the software supply chain security architecture.
• Drive technical strategy across Software Supply Chain Security teams.
• Collaborate on secure runner architecture and pipeline security.

Skills

Deep expertise in software supply chain security

Strong knowledge of artifact signing and verification

Experience designing and hardening CI/CD security

Background in distributed systems and infrastructure

Practical experience with container security

Proficiency in Go or Rust

Demonstrated capacity to communicate complex problems

Education

Experience operating as a Principal or Staff Engineer

Tools

Kubernetes

Sigstore ecosystem

Job description

A leading software development firm is seeking a Principal Engineer for Software Supply Chain Security. In this role, you will lead the strategy for securing software delivery on the platform. Responsibilities include architectural leadership across teams, collaboration on CI/CD security initiatives, and mentoring engineers. Ideal candidates have deep expertise in supply chain security, knowledge of CI/CD practices, and experience with Go or Rust. This role is remote, offering a competitive salary and various benefits including health support and paid time off.