Senior Full Stack, DevSecOps Platform Engineer SBOM, CBOM

InfoVision Inc.; Irving (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

InfoVision Inc. in Irving, TX seeks a Senior Full Stack + DevSecOps Platform Engineer for a 12-month onsite assignment to design and implement secure, scalable platforms.

The role requires deep hands-on experience with Java/Spring Boot, CI/CD, SBOM/CBOM, cloud services, and AI-assisted security workflows, plus strong collaboration across security, platform, and development teams.

Qualifications

• 10+ years of software engineering experience.
• 3+ years of DevOps, DevSecOps, platform engineering, or security automation experience.
• Strong Java/Spring Boot background.
• Hands-on CI/CD and cloud experience.
• Practical experience with security scanning and vulnerability remediation.
• Strong communication skills and ability to work across security, platform, DevOps, and application teams

Skills

Java Spring Boot

Node.js Python Go

REST APIs Microservices

Jenkins GitLab CI/CD

SBOM CBOM Vulnerability

AI Auto-remediation

SBOM Tools Syft Grype

Cryptography TLS/Certificates

AWS Cloud Services

Observability Splunk ELK CloudWatch

AI in workflow Claude

Troubleshooting

Tools

Syft

Grype

CycloneDX

SPDX

JFrog Xray

Sonatype

Checkmarx

Fortify

Veracode

Job description

Please review the below job requirement and let me know if you are good to submit with the below details filled and your latest resume ASAP.

Job Title: Senior Full Stack + DevSecOps Platform Engineer

Location: Irving TX – Onsite

Duration: 12 months

Interview: Face-to-Face interview

Required Skills

• SBOM / CBOM Inventory, Vulnerability Scanning & AI Auto-Remediation
• Strong hands-on experience with Java/Spring Boot.
• Experience with at least one additional language such as Node.js, Python, or Go.
• Experience building REST APIs, microservices, batch jobs, and platform integrations.
• Hands-on experience with Jenkins and/or GitLab CI/CD.
• Strong understanding of SBOM, dependency scanning, transitive dependencies, CVEs, and container image scanning.
• Experience with tools such as Syft, Grype, CycloneDX, SPDX, JFrog Xray, Sonatype, Checkmarx, Fortify, or Veracode.
• Good understanding of CBOM and cryptography inventory, including TLS/HTTPS, certificates, keys, cipher suites, encryption algorithms, hashing algorithms, signing algorithms, keystores, truststores, and secrets.
• Ability to identify weak crypto such as MD5, SHA-1, DES/3DES, RC4, RSA-1024, TLS 1.0/TLS 1.1, and disabled certificate validation.
• Hands-on AWS experience with services such as Lambda, API Gateway, S3, DynamoDB, IAM, ECS/EKS, CloudWatch, X-Ray, Secrets Manager, and KMS.
• Experience with observability tools such as Splunk, ELK/Kibana, CloudWatch, and X-Ray.
• Strong troubleshooting skills across application, pipeline, cloud, and security issues.
• The candidate should understand how to use Claude or similar AI tools in a controlled engineering workflow

Minimum Qualifications

• 10+ years of software engineering experience.
• 3+ years of DevOps, DevSecOps, platform engineering, or security automation experience.
• Strong Java/Spring Boot background.
• Hands-on CI/CD and cloud experience.
• Practical experience with security scanning and vulnerability remediation.
• Strong communication skills and ability to work across security, platform, DevOps, and application teams