OSS Security Engineer - DevSecOps & Cloud

Infosys Limited; Raleigh (NC); On-site; USD 105,000 - 136,000; Full time

Benefits offered by this job

Disability insurance

Health & dependent care accounts

Insurance (various)

Job summary

Infosys is seeking an Engineering Consultant 2 for its Financial Services unit in the US to drive digital transformation through AI, cloud, and data-led solutions. The role focuses on securing software supply chains, OSS governance, and integration across banking, wealth management, and insurance projects.

You will elicit requirements, design prototypes, validate solutions, and document engineering processes while collaborating with cross-functional teams to ensure secure, scalable platforms.

Qualifications

• Experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
• Hands-on experience with OSS governance policies, evaluation workflows, and automation.
• Knowledge of artifact signing and integrity verification technologies (Sigstore/Cosign, GPG, Notary).
• Experience implementing SLSA provenance and in-toto attestations, and software supply chain security controls.
• Hands-on experience generating and managing SBOMs (CycloneDX, SPDX, Syft).
• Strong experience with AWS services (IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch).
• Experience integrating security and compliance controls into CI/CD pipelines.

Responsibilities

• Elicit and document business and technical requirements, translating them into actionable specifications.
• Participate in design meetings and support development of design sketches and models.
• Lead iterative engineering design cycles and coordinate with teams to implement feedback.
• Develop and refine solution specifications and perform validation activities, including simulations.
• Build and refine prototypes incorporating testing results and cross-functional feedback.
• Undertake technical integration efforts and resolve interoperability issues.
• Develop and maintain technical documentation and support knowledge-sharing sessions.

Skills

DevSecOps

Platform Engineering

Scripting: Python/Bash/Go

Education

Bachelor’s degree or equivalent

Tools

Sonatype IQ Server

Nexus Repository

JFrog

Job description

Infosys is seeking an Engineering Consultant 2 for its Financial Services unit in the US to drive digital transformation through AI, cloud, and data-led solutions. The role focuses on securing software supply chains, OSS governance, and integration across banking, wealth management, and insurance projects.

You will elicit requirements, design prototypes, validate solutions, and document engineering processes while collaborating with cross-functional teams to ensure secure, scalable platforms.