OSS Security Engineer: DevSecOps & Cloud Governance

Infosys Limited; Hartford (CT); On-site; USD 105,000 - 136,000; Full time

Benefits offered by this job

Disability benefits

Health Care Reimbursement

Insurance benefits

401(k) plan

Job summary

Infosys is hiring for an Engineering Consultant 2 in the USA to advance AI, cloud, and data-driven transformations for financial services clients. You will elicit complex requirements, contribute to design and prototyping, and drive secure software supply chain initiatives across banking, wealth management, and insurance projects.

You will join a team focused on cutting-edge AI technologies, collaborate with industry experts, and help implement governance, security, and automation across CI/CD

Qualifications

• Experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
• Hands-on with Sonatype Lifecycle (IQ Server), Nexus Repository, or JFrog.
• Experience developing OSS governance policies and automation.
• Knowledge of artifact signing and integrity verification (Sigstore/Cosign, GPG, Notary).
• Experience implementing SLSA provenance and in-toto attestations.
• Hands-on experience generating SBOMs with CycloneDX, SPDX, or Syft.
• Strong AWS experience: IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch.
• CI/CD integration of security controls.
• Scripting in Python, Bash, or Go.
• Experience with OCI registries and Maven/npm/PyPI/NuGet.
• Understanding of NIST SSDF, EO 14028, Secure by Design.

Responsibilities

• Elicit and document business and technical requirements.
• Participate in design meetings and support design sketches and models.
• Coordinate iterative engineering design cycles and feedback.
• Develop and validate solution specifications, including simulations.
• Build prototypes and incorporate cross-functional feedback.
• Undertake technical integration and resolve interoperability issues.
• Create and maintain technical documentation; support knowledge sharing.

Skills

DevSecOps

Platform Engineering

OSS governance

Artifact signing

SBOMs

AWS

CI/CD pipelines

Python scripting

OCI registries

NIST SSDF

Education

Bachelor’s degree

Tools

Sonatype Lifecycle

Nexus Repository

JFrog

Sigstore/Cosign

GPG

Notary

CycloneDX

SPDX

Syft

Job description

Infosys is hiring for an Engineering Consultant 2 in the USA to advance AI, cloud, and data-driven transformations for financial services clients. You will elicit complex requirements, contribute to design and prototyping, and drive secure software supply chain initiatives across banking, wealth management, and insurance projects.

You will join a team focused on cutting-edge AI technologies, collaborate with industry experts, and help implement governance, security, and automation across CI/CD