DevSecOps Engineer - Secure Software Supply Chain (AWS)

System One; Lafayette (LA); Presencial; USD 120 000 - 170 000; Tempo integral

Resumo da oferta

Systemone is seeking a DevSecOps Engineer to strengthen our software supply chain security program within a large-scale, AWS-based financial services environment. You will help secure the software delivery lifecycle—from open source governance to CI/CD artifact integrity—ensuring that software built and deployed across the organization meets rigorous compliance and security standards.

You will work hands-on with Nexus/IQ Server, implement SLSA and Sigstore/Cosign, and build automation that

Qualificações

• 5+ years in DevSecOps, Platform Engineering, or Software Supply Chain roles
• Hands-on with Sonatype Nexus and IQ Server (or Artifactory)
• Experience building automated open source policy workflows
• Artifact signing tools like Sigstore/Cosign, GPG, or Notary
• Familiarity with SLSA provenance and attestations
• SBOM generation tools: CycloneDX, SPDX, or Syft
• Strong CI/CD background, GitLab preferred or GitHub Actions
• Strong AWS skills: IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch
• Scripting: Python, Bash, or Go
• Exposure to OCI registries and package ecosystems like Maven, npm, PyPI, NuGet

Responsabilidades

• Support secure software delivery through enterprise supply chain initiatives
• Manage and enhance artifact repository tooling and open source policy governance
• Build and maintain software approval, quarantine, and lifecycle workflows
• Drive dependency upgrades and vulnerability remediation efforts
• Onboard new/emerging technology ecosystems (including AI/ML frameworks)
• Create dashboards and metrics for supply chain health and compliance
• Implement CI/CD artifact signing, build provenance (SLSA), and SBOM integration

Conhecimentos

DevSecOps

Platform Engineering

Software Supply Chain

CI/CD

AWS

Python/Bash/Go

SBOM

Security Automation

Open Source Policy

Formação académica

Bachelor's degree in CS/IS

Ferramentas

Sonatype Nexus/IQ Server

jFrog Artifactory

Sigstore/Cosign

GPG/Notary

SLSA provenance

CycloneDX

SPDX

Syft

GitLab

CI/CD tooling

Descrição da oferta de emprego

Systemone is seeking a DevSecOps Engineer to strengthen our software supply chain security program within a large-scale, AWS-based financial services environment. You will help secure the software delivery lifecycle—from open source governance to CI/CD artifact integrity—ensuring that software built and deployed across the organization meets rigorous compliance and security standards.

You will work hands-on with Nexus/IQ Server, implement SLSA and Sigstore/Cosign, and build automation that