Senior DevSecOps & Supply-Chain Security Architect

OpenTalent; Boston (MA); On-site; USD 160,000 - 210,000; Full time

Job summary

OpenTalent is seeking a DevSecOps & Supply Chain Security Consultant with over a decade of experience in secure software delivery, CI/CD, and software supply-chain security. You will focus on secure SDLC, CI/CD security, SBOM, and governance across IaC, containers, and pipelines.

The consultant will validate traceability, SBOM accuracy, and security gates, producing audit-ready findings and executive summaries for stakeholders. Travel to Boston and Tewksbury, MA will be required.

Qualifications

• 10+ years of experience in secure software delivery, CI/CD, and software supply-chain security.
• Experience validating source-to-release traceability and SBOM accuracy.
• Ability to produce audit-ready findings and executive reporting.

Responsibilities

• Assess software supply chain security, SDLC maturity, and CI/CD controls.
• Review security tooling, secure development practices, and SBOM accuracy.
• Evaluate SCA, dependency governance, and third-party risk.
• Assess pipeline security, artifact integrity, and build provenance.
• Validate signing, tamper resistance, and remediation decisions.
• Review IaC, pipeline-as-code, policy-as-code, and security gates.
• Manage secrets across development, build, and deployment environments.
• Produce audit-ready findings and stakeholder-ready executive communication.

Skills

Secure software delivery

CI/CD security

SBOM governance

SAST/DAST

IaC security

Vulnerability governance

Security auditing

Regulatory evidence

Job description

OpenTalent is seeking a DevSecOps & Supply Chain Security Consultant with over a decade of experience in secure software delivery, CI/CD, and software supply-chain security. You will focus on secure SDLC, CI/CD security, SBOM, and governance across IaC, containers, and pipelines.

The consultant will validate traceability, SBOM accuracy, and security gates, producing audit-ready findings and executive summaries for stakeholders. Travel to Boston and Tewksbury, MA will be required.