Senior DevSecOps Architect — Software Supply Chain Security (Remote)

New Era Technology; Tinton Falls (NJ); Remote; USD 140,000 - 190,000; Full time

Job summary

New Era Technology is seeking a hands-on DevSecOps Architect to secure software build and release pipelines for our client, Commvault. You will lead security controls across CI/CD, SBOM workflows, and artifact signing in a remote US-based role.

Ideal candidates have 5–8 years in DevSecOps with GitHub Actions, GitLab pipelines, and Kubernetes security. You will collaborate with cross-functional teams and align practices with NIST and SLSA standards.

Qualifications

• 5–8 years of experience in DevSecOps, application security, or platform engineering with CI/CD security ownership.
• Hands-on experience with GitHub Actions and GitLab pipelines at scale.
• Experience generating and managing SBOMs using SPDX/CycloneDX.
• Knowledge of SLSA, NIST SSDF, and NIST SP 800-218.
• Experience with artifact signing and provenance verification tools like Sigstore, Cosign, or in-toto.
• Kubernetes security experience including admission controls, network policies, and workload hardening.
• Experience with policy-as-code tools (OPA, Kyverno, Conftest).
• Threat modeling knowledge (STRIDE, attack trees).
• Scripting in Python, Bash, or Go; familiarity with Docker and container registries.

Responsibilities

• Design and implement software supply chain security controls across build and release pipelines.
• Secure GitHub and GitLab environments, including branch protection and provenance attestation.
• Implement SBOM generation, validation, and distribution.
• Integrate dependency scanning and vulnerability management into CI/CD pipelines.
• Implement artifact signing and verification using Sigstore, Cosign, or in‑toto.
• Develop policy‑as‑code controls with OPA, Kyverno, or Conftest.
• Secure Kubernetes build and deployment environments.
• Conduct threat modeling for CI/CD pipelines and AI-assisted development workflows.
• Assess risks of open-source dependencies and AI-generated code.

Skills

GitHub Actions

GitLab pipelines

SBOM management

SBOM formats SPDX/CycloneDX

Artifact signing

Sigstore

Cosign

in-toto

Kubernetes security

Open Policy Agent (OPA)

Kyverno

Conftest

Threat modeling

STRIDE

Python

Bash

Go

Docker

OCI images

Education

Bachelor's degree in Computer Science / Information Security / Engineering

Tools

Kubernetes

Docker

OCI registries

Job description

New Era Technology is seeking a hands-on DevSecOps Architect to secure software build and release pipelines for our client, Commvault. You will lead security controls across CI/CD, SBOM workflows, and artifact signing in a remote US-based role.

Ideal candidates have 5–8 years in DevSecOps with GitHub Actions, GitLab pipelines, and Kubernetes security. You will collaborate with cross-functional teams and align practices with NIST and SLSA standards.