DevSecOps Engineer

System One; Knoxville (TN); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental coverage

Vision coverage

Life insurance

401(k) plan

Voluntary plans

Spending accounts

Job summary

System One is seeking a DevSecOps Engineer to enable secure software delivery through enterprise supply chain initiatives. You will manage artifact tooling, enforce open source policy governance, and drive remediation across CI/CD including SLSA provenance and SBOM integration.

The role requires hands-on experience with Nexus/IQ Server or Artifactory, AWS, and scripting in Python/Bash/Go. A BS in CS/IS or related field is required. Hybrid work model with onsite and remote collaboration in the US.

Qualifications

• 5+ years in DevSecOps, Platform Engineering, or Software Supply Chain roles
• Hands on with Nexus and IQ Server (or Artifactory)
• Automated open source policy workflows experience
• Experience with artifact signing tools (Sigstore/Cosign, GPG, Notary)
• Familiarity with SLSA provenance and in-toto attestations
• Know SBOM tools (CycloneDX, SPDX, Syft)
• Solid CI/CD background (GitLab, GitHub Actions)
• Strong AWS skills (IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch)
• Scripting in Python, Bash, or Go
• OCI registries and package ecosystems (Maven, npm, PyPI, NuGet)
• Bachelor’s degree requirement

Responsibilities

• Support secure software delivery through enterprise supply chain initiatives
• Manage and enhance artifact repository tooling and open source policy governance
• Build and maintain software approval, quarantine, and lifecycle workflows
• Drive dependency upgrades and vulnerability remediation efforts
• Onboard new/emerging technology ecosystems (including AI/ML frameworks)
• Create dashboards and metrics for supply chain health and compliance
• Implement CI/CD artifact signing, build provenance (SLSA), and SBOM integration

Skills

Supply chain security

CI/CD

Python

Bash

Go

Linux/Unix

SBOM tooling

Vulnerability remediation

GitLab

AWS

Nexus/IQ Server

Sigstore/Cosign

SBOM formats

Artifact signing

Education

Bachelor's degree in CS/IS or related field

Tools

Nexus/IQ Server

jFrog Artifactory

Sigstore/Cosign

GPG

Notary

CycloneDX

SPDX

Syft

GitLab

Job description

Job Title: DevSecOps Engineer
Location: Lafayette, LA
Type: Direct Hire
Work Model: Hybrid – onsite and remote
Hours: 40.0
Security Clearance: Not specified in the provided details

Responsibilities

• Support secure software delivery through enterprise supply chain initiatives
• Manage and enhance artifact repository tooling and open source policy governance
• Build and maintain software approval, quarantine, and lifecycle workflows
• Drive dependency upgrades and vulnerability remediation efforts
• Onboard new/emerging technology ecosystems (including AI/ML frameworks)
• Create dashboards and metrics for supply chain health and compliance
• Implement CI/CD artifact signing, build provenance (SLSA), and SBOM integration

Requirements

• 5+ years working in DevSecOps, Platform Engineering, or Software Supply Chain roles
• Hands on experience with Sonatype Nexus and IQ Server (or similar — jFrog Artifactory is fine too)
• Comfortable building and maintaining automated open source policy workflows
• Experience with artifact signing tools like Sigstore/Cosign, GPG, or Notary
• Familiarity with SLSA provenance and in toto attestations (or similar supply chain security frameworks)
• Know your way around SBOM generation tools — CycloneDX, SPDX, or Syft
• Solid CI/CD background, ideally with GitLab (GitHub Actions also welcome)
• Strong AWS chops — IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch
• Scripting ability in Python, Bash, or Go
• Exposure to OCI registries and package ecosystems like Maven, npm, PyPI, or NuGet
• Bachelor's degree in Computer Science, Information Systems, or a related field

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-
#LI-

Ref: #404-IT Pittsburgh