Secure Build, Release & Supply-Chain Engineer

Hitachi, Ltd.; Szczecin; Presencial; PLN 180.000 - 300.000; Jornada completa

Descripción de la vacante

GlobalLogic is seeking a Secure Build, Release & Supply-Chain Engineer in Szczecin, Poland to own software supply-chain integrity and secure release management across engineering platforms.

You will design reproducible builds, enforce trusted package sources, manage private registries, generate SBOMs, implement artifact signing, and establish policy gates for audit-ready releases.

Formación

• 5+ years of experience in build and release engineering, DevSecOps, CI/CD platform engineering, or software supply-chain security.
• Build Systems & Compilation: Hands-on experience debugging and orchestrating multi-language compilation pipelines, dependency resolution, packaging systems, and reproducible builds.
• Registry & Package Management: In-depth experience administering and securing private artifact repositories and container registries (e.g., Harbor, Nexus, Artifactory).
• Supply-Chain Controls: Practical expertise implementing SBOM generation and analysis, provenance tracking, vulnerability/secrets scanning, image signing, and verification gates.
• Core DevOps & Platform Fundamentals: Strong proficiency in Linux systems administration, advanced Git workflows, containerization (Docker), and CI/CD platforms (e.g., GitLab CI, Jenkins).
• Scripting & Automation: Strong scripting abilities in Python and Bash to build resilient release and verification automation.

Responsabilidades

• Supply-Chain Integrity & Attestation: Establish and enforce end-to-end software supply-chain controls, including generating cryptographic provenance (SLSA framework), producing comprehensive SBOMs, and implementing artifact signing.
• Build System & Pipeline Hardening: Architect reproducible build pipelines, isolate build environments using tools like BuildKit or Kaniko, and eliminate hidden compiler or environment assumptions across multi-language projects.
• Artifact Lifecycle & Promotion: Manage trusted package feeds, secure private artifact registries (Harbor, Nexus, Artifactory), and build automated, audit-ready promotion pipelines and release runbooks.
• Automated Policy Gates & Admission Controls: Implement automated verification mechanisms, static and vulnerability scanning (SCA, container, secrets), and admission policy enforcement to block unvetted or untrusted artifacts.
• Audit & Compliance Readiness: Maintain tamper-evident audit trails, artifact lineage records, and evidence generation workflows to satisfy compliance standards.

Conocimientos

Build & release engineering

DevSecOps

CI/CD platform engineering

Python & Bash scripting

Linux administration

Git workflows

Herramientas

Harbor

Nexus

Artifactory

BuildKit

Kaniko

GitLab CI

Jenkins

Cosign

Sigstore

OPA

Conftest

Tekton

Kubernetes

Helm

ArgoCD

Vault

Descripción del empleo

Job Description

We are looking for a Secure Build, Release & Supply-Chain Engineer to take complete ownership of software supply-chain integrity and secure release management across our engineering platforms. In this role, you will design and enforce reproducible builds, secure trusted package sources, manage private registries, generate and verify Software Bills of Materials (SBOMs), implement artifact signing and provenance, and establish policy gates for audit-ready artifact promotion and production releases.

Requirements

Must-Have Requirements

• 5+ years of experience in build and release engineering, DevSecOps, CI/CD platform engineering, or software supply-chain security.
• Build Systems & Compilation: Hands-on experience debugging and orchestrating multi-language compilation pipelines, dependency resolution, packaging systems, and reproducible builds.
• Registry & Package Management: In-depth experience administering and securing private artifact repositories and container registries (e.g., Harbor, Sonatype Nexus, JFrog Artifactory).
• Supply-Chain Controls: Practical expertise implementing SBOM generation and analysis, provenance tracking, vulnerability/secrets scanning, image signing, and verification gates.
• Core DevOps & Platform Fundamentals: Strong proficiency in Linux systems administration, advanced Git workflows, containerization (Docker), and CI/CD platforms (e.g., GitLab CI, Jenkins).
• Scripting & Automation: Strong scripting abilities in Python and Bash to build resilient release and verification automation.

Nice-to-Have Skills

• Security Frameworks: Practical knowledge of the SLSA (Supply-chain Levels for Software Artifacts) framework and implementing its requirements across build levels.
• Signing & Policy-as-Code: Direct experience with Cosign (Sigstore), Open Policy Agent (OPA), or Conftest for admission control and signature enforcement.
• Modern Container Build Tools: Experience with isolated, daemonless container build tools like BuildKit or Kaniko.
• Cloud-Native Delivery: Familiarity with Tekton pipelines, Kubernetes, Helm, and ArgoCD for declarative deployments.
• Secrets & Compliance: Experience integrating enterprise secrets management (e.g., HashiCorp Vault) and generating automated compliance/audit reports.

Job Responsibilities

• Supply-Chain Integrity & Attestation: Establish and enforce end-to-end software supply-chain controls, including generating cryptographic provenance (SLSA framework), producing comprehensive SBOMs, and implementing artifact signing.
• Build System & Pipeline Hardening: Architect reproducible build pipelines, isolate build environments using tools like BuildKit or Kaniko, and eliminate hidden compiler or environment assumptions across multi-language projects.
• Artifact Lifecycle & Promotion: Manage trusted package feeds, secure private artifact registries (Harbor, Nexus, Artifactory), and build automated, audit-ready promotion pipelines and release runbooks.
• Automated Policy Gates & Admission Controls: Implement automated verification mechanisms, static and vulnerability scanning (SCA, container, secrets), and admission policy enforcement to block unvetted or untrusted artifacts.
• Audit & Compliance Readiness: Maintain tamper-evident audit trails, artifact lineage records, and evidence generation workflows to satisfy compliance standards.

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people's lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic is a full-lifecycle product development services leader that combines chip-to-cloud software engineering expertise and vertical industry experience to help our customers design, build, and deliver their next-generation products and digital experiences. We expertly integrate design, complex engineering, and agile delivery capabilities to deliver superior business outcomes for global brands in telecom, automotive, healthcare, technology, media and entertainment, manufacturing, and semiconductor industries.

Headquartered in Silicon Valley, GlobalLogic employs over 25,000 designers and engineers across the globe. Analysts like NASSCOM and Zinnov have recognized us for being a top company in our field, and we are consistently nominated as a preferred employer by both global HR consultative firms and local job boards. By creating a work environment that is exciting and flexible, and by fostering growth through ongoing learning and development programs, we empower our employees to achieve both their professional and personal goals.

At GlobalLogic, we make amazing products - and careers.