DevSecOps Engineer – Secure Software Supply Chain (Hybrid)

System One; Louisiana; Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Health and welfare options

401(k) plan

Job summary

System One seeks a DevSecOps Engineer in Lafayette, LA, for a direct-hire, hybrid role combining onsite and remote work. The candidate will support secure software delivery, manage artifact tooling, and drive policy governance within software supply chains.

Requirements include 5+ years in DevSecOps or related roles, experience with Nexus/IQ or Artifactory, and proven CI/CD expertise with AWS and scripting skills in Python, Bash, or Go.

Qualifications

• 5+ years in DevSecOps, platform engineering, or software supply chain roles.
• Hands-on with Nexus, IQ Server, or Artifactory.
• Experience building automated open source policy workflows.
• Experience with artifact signing tools such as Sigstore/Cosign, GPG, or Notary.
• Familiarity with SLSA provenance and attestations.
• SBOM generation with CycloneDX, SPDX, or Syft.
• Strong CI/CD background (GitLab preferred, GitHub Actions welcome).
• Strong AWS skills (IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch).
• Scripting in Python, Bash, or Go.
• Experience with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).
• Bachelor's degree in CS or related field.

Responsibilities

• Support secure software delivery through enterprise supply chain initiatives.
• Manage and enhance artifact repository tooling and open source policy governance.
• Build and maintain software approval, quarantine, and lifecycle workflows.
• Drive dependency upgrades and vulnerability remediation efforts.
• Onboard new/emerging technology ecosystems (including AI/ML frameworks).
• Create dashboards and metrics for supply chain health and compliance.
• Implement CI/CD artifact signing, build provenance (SLSA), and SBOM integration.

Skills

DevSecOps

Platform Engineering

Software Supply Chain

Nexus/IQ Server

Artifactory

Open Source Policy

Sign/Verify (Sigstore Cosign)

GPG/Notary

SLSA provenance

SBOM tools

GitLab CI/CD

GitHub Actions

AWS (IAM, ECS/EKS, EC2, S3, Lambda, SF

Python

Bash

Go

OCI registries

Maven

npm

PyPI

NuGet

Education

Bachelor's degree in Computer Science, Information Systems, or a related field

Tools

Sonatype Nexus

IQ Server

JFrog Artifactory

Sigstore/Cosign

GPG

Notary

CycloneDX

SPDX

Syft

GitLab CI/CD

GitHub Actions

AWS (IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch)

Python

Bash

Go

OCI registries

Job description

System One seeks a DevSecOps Engineer in Lafayette, LA, for a direct-hire, hybrid role combining onsite and remote work. The candidate will support secure software delivery, manage artifact tooling, and drive policy governance within software supply chains.

Requirements include 5+ years in DevSecOps or related roles, experience with Nexus/IQ or Artifactory, and proven CI/CD expertise with AWS and scripting skills in Python, Bash, or Go.