Senior DevSecOps & Supply-Chain Security Architect

OMG Technology; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

OMG Technology invites a seasoned DevSecOps & Supply Chain Security Consultant for onsite engagement in Boston, MA. You will lead secure software delivery practices, strengthen CI/CD pipelines, and ensure SBOM accuracy across the release lifecycle.

You will validate traceability, tamper resistance, and governance controls, producing audit-ready findings and executive-level reporting for the client. Travel to the Tewksbury, MA site may be required when needed for engagement milestones.

Qualifications

• 10+ years of experience in secure CI/CD pipeline setup and controls validation.
• Hands-on SBOM analysis experience (2+ years).
• Familiarity with NIST SSDF and secure software supply-chain practices.

Responsibilities

• Assess software supply chain security, SDLC maturity, SBOM governance, CI/CD pipeline controls.
• Review SDLC processes, security tooling, and secure development practices.
• Evaluate CI/CD pipeline security, artifact integrity, and build provenance.
• Validate SBOM generation, signing, and reconciliation.
• Produce audit-ready findings and stakeholder-ready reporting.

Skills

CI/CD security

SBOM analysis

SCA/SAST/DAST

Vulnerability governance

Regulatory security

Tools

Syft

Grype

Trivy

Gitleaks

Dependency-Track

Cosign

Sigstore

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Job description

OMG Technology invites a seasoned DevSecOps & Supply Chain Security Consultant for onsite engagement in Boston, MA. You will lead secure software delivery practices, strengthen CI/CD pipelines, and ensure SBOM accuracy across the release lifecycle.

You will validate traceability, tamper resistance, and governance controls, producing audit-ready findings and executive-level reporting for the client. Travel to the Tewksbury, MA site may be required when needed for engagement milestones.