DevSecOps Engineer

Hybrid in Richardson, TX, US • Posted 1 day ago • Updated 15 hours ago
Contract W2
12 Months
No Travel Required
Hybrid
Depends on Experience
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • DevSecOps
  • Firewall
  • IQ
  • Meta-data Management
  • Nexus
  • Regulatory Compliance
  • Reporting
  • Proxies
  • Open Source
  • Supply Chain Management
  • Continuous Integration and Development
  • Enterprise Software

Summary

Job Title: DevSecOps Engineer
Location: Richardson, TX 75082 (Hybrid)
Duration: 12+ Months 
 
Must Have Skills:
  • 5+ years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience
  • Handson experience with Sona type Lifecycle (IQ Server) and Nexus Repository (or comparable tooling
  • Experience creating and maintaining automated Open-Source Software Evaluation policies and workflows
 
Nice to have skills:
  • Experience with SLSA provenance, into attestations, or similar frameworks
  • Experience with SBOM generation (CycloneDX, SPDX, Syft).
 
Detailed Job Description:
  • Lead design and enablement of enterprise software supply chain initiatives, supporting secure software delivery.
  • Enhance Sonatype Repository artifact management, IQ firewall policy governance, and opensource software lifecycle.
  • Define and automate software approval workflows, quarantine waiver, and lifecycle management processes.
  • Design and enable repository proxy strategies for supported software ecosystems.
  • Drive dependency upgrades and vulnerability remediation workflows.
  • Support design and onboarding of emerging ecosystems, including AIML frameworks.
  • Design and enable reporting and metrics for software supply chain health, policy compliance, and repository utilization.
  • Design and enable CICD artifact signing and verification capabilities for software builds.
  • Design and implement SLSA build provenance and attestations across CICD platforms.
  • Integrate SBOM generation and software metadata into build and deployment pipelines.
  • Collaborate with security and development teams to improve software supply chain visibility and integrity.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 90977120
  • Position Id: 9138717
  • Posted 1 day ago
Contact the job poster
ST

Surya Teja

Recruiter @ TechSpace Solutions Inc.

Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.