FOSS Compliance Engineer: SBOM & Automation Lead

eTeam; Ireland; On-site; EUR 70,000 - 110,000; Full time

Job summary

eTeam is seeking a FOSS Compliance Engineer within the Open Source Engineering team in Ireland. You will ensure products meet open source licensing obligations and improve license reporting across product lines.

Responsibilities include maintaining SBOMs, automating compliance workflows in Python, and integrating scans into CI/CD. Hands-on experience with FossID, Black Duck, SPDX, and CycloneDX is preferred, with strong writing and collaboration skills.

Qualifications

• 4–8 years of experience in FOSS compliance or related field.
• Experience with OSS license compliance reporting and publishing.
• Hands-on with Software Composition Analysis (SCA) tooling.
• Familiarity with SBOM standards (SPDX, CycloneDX).
• Experience with OpenChain standard is a plus.
• Ability to read C/C++, Java, Python, Go.

Responsibilities

• Perform FOSS compliance analysis across software products and services.
• Identify OSS licenses and assess impact on distribution.
• Maintain inventories of components, licenses, obligations, and attributions; ensure traceability across source, binaries, images, and containers.
• Operate and integrate SCA tooling (FossID preferred) and embed scans into development workflows.
• Automate compliance workflows (Python) for scanning, SBOM generation/validation, approvals, reporting, and release readiness checks.
• Publish, validate, and version SBOMs for releases.
• Conduct OSS risk assessments and recommend remediation strategies.
• Guide development teams on OSS intake, dependency linking, attribution, and license-compliant usage.
• Stay current on licensing trends, regulatory developments, and community practices; contribute to policy improvements.
• Support reviews, audits, and governance activities including prerelease compliance gates.

Skills

FOSS compliance

SBOM

Open source licensing

Automation in CI/CD

SCA tooling

FossID

Black Duck

SPDX

CycloneDX

Python

C/C++

Go

Education

Bachelor's in Computer Engineering or equivalent

Master's preferred

Tools

FossID

Black Duck

SPDX

CycloneDX

Job description

eTeam is seeking a FOSS Compliance Engineer within the Open Source Engineering team in Ireland. You will ensure products meet open source licensing obligations and improve license reporting across product lines.

Responsibilities include maintaining SBOMs, automating compliance workflows in Python, and integrating scans into CI/CD. Hands-on experience with FossID, Black Duck, SPDX, and CycloneDX is preferred, with strong writing and collaboration skills.