DevSecOps Engineer - Secure Software Supply Chain (Hybrid)

System One; Knoxville (TN); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental coverage

Vision coverage

Life insurance

401(k) plan

Voluntary plans

Spending accounts

Job summary

System One is seeking a DevSecOps Engineer to enable secure software delivery through enterprise supply chain initiatives. You will manage artifact tooling, enforce open source policy governance, and drive remediation across CI/CD including SLSA provenance and SBOM integration.

The role requires hands-on experience with Nexus/IQ Server or Artifactory, AWS, and scripting in Python/Bash/Go. A BS in CS/IS or related field is required. Hybrid work model with onsite and remote collaboration in the US.

Qualifications

• 5+ years in DevSecOps, Platform Engineering, or Software Supply Chain roles
• Hands on with Nexus and IQ Server (or Artifactory)
• Automated open source policy workflows experience
• Experience with artifact signing tools (Sigstore/Cosign, GPG, Notary)
• Familiarity with SLSA provenance and in-toto attestations
• Know SBOM tools (CycloneDX, SPDX, Syft)
• Solid CI/CD background (GitLab, GitHub Actions)
• Strong AWS skills (IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch)
• Scripting in Python, Bash, or Go
• OCI registries and package ecosystems (Maven, npm, PyPI, NuGet)
• Bachelor’s degree requirement

Responsibilities

• Support secure software delivery through enterprise supply chain initiatives
• Manage and enhance artifact repository tooling and open source policy governance
• Build and maintain software approval, quarantine, and lifecycle workflows
• Drive dependency upgrades and vulnerability remediation efforts
• Onboard new/emerging technology ecosystems (including AI/ML frameworks)
• Create dashboards and metrics for supply chain health and compliance
• Implement CI/CD artifact signing, build provenance (SLSA), and SBOM integration

Skills

Supply chain security

CI/CD

Python

Bash

Go

Linux/Unix

SBOM tooling

Vulnerability remediation

GitLab

AWS

Nexus/IQ Server

Sigstore/Cosign

SBOM formats

Artifact signing

Education

Bachelor's degree in CS/IS or related field

Tools

Nexus/IQ Server

jFrog Artifactory

Sigstore/Cosign

GPG

Notary

CycloneDX

SPDX

Syft

GitLab

Job description

System One is seeking a DevSecOps Engineer to enable secure software delivery through enterprise supply chain initiatives. You will manage artifact tooling, enforce open source policy governance, and drive remediation across CI/CD including SLSA provenance and SBOM integration.

The role requires hands-on experience with Nexus/IQ Server or Artifactory, AWS, and scripting in Python/Bash/Go. A BS in CS/IS or related field is required. Hybrid work model with onsite and remote collaboration in the US.