Sage IT Inc
Sage IT Inc

DevSecOps Engineer - Atlanta, GA (Onsite)

• Posted 6 hours ago • Updated 5 hours ago
Full Time
Travel Required
Company Branding Image
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • FOCUS
  • Software Development
  • Security Controls
  • Enterprise Software
  • Lifecycle Management
  • Proxies
  • Management
  • Onboarding
  • Emerging Technologies
  • Artificial Intelligence
  • Machine Learning (ML)
  • Dashboard
  • Meta-data Management
  • Regulatory Compliance
  • DevSecOps
  • IQ
  • Nexus
  • JFrog
  • Open Source
  • Operations Support Systems
  • Workflow
  • Supply Chain Management
  • GitLab
  • GitHub
  • Amazon Web Services
  • Amazon EC2
  • Amazon S3
  • Step-Functions
  • Continuous Integration
  • Continuous Delivery
  • Scripting
  • Python
  • Bash
  • OCI
  • Apache Maven
  • NuGet

Summary

Role: DevSecOps Engineer

Location: Atlanta, GA (Onsite)

Role Overview

We are looking for a senior DevSecOps Engineer with strong expertise in Software Supply Chain Security, DevSecOps, and Platform Engineering. This role will focus on securing the software development lifecycle, enhancing artifact management, implementing supply chain security controls, and enabling secure CI/CD practices across the enterprise.

Key Responsibilities

  • Lead enterprise software supply chain security initiatives and support secure software delivery practices.
  • Manage and enhance Sonatype Nexus Repository and IQ Server policies for artifact governance and open-source software compliance.
  • Design and automate software approval workflows, quarantine processes, waivers, and lifecycle management.
  • Implement repository proxy strategies across various software ecosystems.
  • Drive dependency management, vulnerability remediation, and secure package consumption.
  • Support onboarding of emerging technologies and ecosystems, including AI/ML frameworks.
  • Develop dashboards and metrics for repository usage, policy compliance, and software supply chain health.
  • Implement artifact signing and verification using technologies such as Cosign, Sigstore, GPG, or Notary.
  • Design and implement SLSA provenance, build attestations, and secure build frameworks.
  • Integrate SBOM generation and software metadata into CI/CD pipelines.
  • Partner with development and security teams to improve software integrity, visibility, and compliance.

Required Skills & Experience

  • 9+ years of experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
  • Strong hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or equivalent tools such as JFrog Artifactory).
  • Experience implementing Open Source Software (OSS) governance policies and automated approval workflows.
  • Expertise in artifact signing technologies (Sigstore/Cosign, GPG, Notary).
  • Experience with SLSA, in-toto attestations, and software supply chain security frameworks.
  • Hands-on experience with SBOM tools and standards (CycloneDX, SPDX, Syft).
  • Strong CI/CD experience using GitLab, GitHub Actions, or similar platforms.
  • Deep AWS expertise including IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
  • Experience integrating security tools into CI/CD pipelines.
  • Strong scripting and automation skills in Python, Bash, or Go.
  • Knowledge of OCI registries and package ecosystems including Maven, npm, PyPI, and NuGet.
  • Familiarity with NIST SSDF, Executive Order 14028, and Secure-by-Design principles.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10120222
  • Position Id: 2026-108851/16603
  • Posted 6 hours ago

Company Info

About Sage IT Inc

Sage IT is a IT services provider of innovative technology-driven solutions, services and resources. At SAGE, we believe that success results from delivering high quality service while being responsible, flexible, and innovative.

SAGE offers comprehensive application development, technology consulting, business processes re-engineering, professional staffing, implementation and support services for companies all over the world. SAGE also offers industry-specific solutions, strategic outsourcing, and integration services through a unique onsite, offsite, offshore delivery model that helps our customers achieve rapid implementation, world-class quality and reduced costs.

About_Company_One
Go to company profile
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.