Senior DevSecOps Engineer

Hybrid in Birmingham, AL, US • Posted 1 day ago • Updated 1 day ago
Full Time
Hybrid
$104000/yr
Company Branding Image
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

Summary

Senior DevSecOps Engineer
Permanent Full-Time
Lafayette, LA | Knoxville, TN | Birmingham, AL | Columbia SC


Position Description
This role focuses on improving software supply chain security, artifact management, open-source governance, CI/CD security, SBOM generation, artifact signing, and software provenance across enterprise environments.
Key Responsibilities

  • Enhance artifact management, policy governance, and open-source lifecycle processes using tools such as Sonatype Lifecycle (IQ Server), Nexus Repository, or JFrog.
  • Build and automate software approval workflows, including quarantine and waiver processes.
  • Develop and maintain repository proxy strategies across supported software ecosystems.
  • Drive dependency upgrades and vulnerability remediation initiatives.
  • Support onboarding of emerging ecosystems, including AI/ML frameworks.
  • Build reporting and metrics for:
    • Software supply chain health
    • Policy compliance
    • Repository utilization
  • Enable CI/CD artifact signing and verification.
  • Implement SLSA build provenance and attestations.
  • Integrate SBOM generation into build and deployment pipelines.
  • Partner with security and development teams to improve software supply chain visibility, integrity, and security across the organization.
  • Help build secure and trustworthy software delivery pipelines at enterprise scale.
Required Qualifications
  • 5+ years of experience in:
    • DevSecOps
    • Platform Engineering
    • Software Supply Chain Engineering
  • Hands-on experience with:
    • Sonatype Lifecycle / IQ Server
    • Nexus Repository
    • Or similar tools such as JFrog
  • Experience building and maintaining automated Open Source Software evaluation policies and workflows.
  • Experience with artifact signing technologies such as:
    • Sigstore
    • Cosign
    • GPG
    • Notary
  • Experience with:
    • SLSA provenance
    • in-toto attestations
    • Similar software supply chain frameworks
  • Experience generating SBOMs using:
    • CycloneDX
    • SPDX
    • Syft
  • Strong CI/CD experience, preferably:
    • GitLab
    • GitHub Actions also acceptable
  • Strong AWS experience with:
    • IAM
    • ECS / EKS
    • EC2
    • S3
    • Lambda
    • Step Functions
    • CloudWatch
  • Experience integrating security tooling directly into CI/CD pipelines.
  • Strong scripting skills in:
    • Python
    • Bash
    • Go
  • Experience maintaining enterprise open-source platforms.
  • Familiarity with OCI registries and package ecosystems such as:
    • Maven
    • npm
    • PyPI
    • NuGet
  • Knowledge of:
    • NIST SSDF
    • Executive Order 14028
    • Secure by Design principles

Educational Requirement
Bachelor’s degree in Computer Science, Information Systems, or a related field.
 



Ref: #404-IT Pittsburgh
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10295162
  • Position Id: 381061
  • Posted 1 day ago

Company Info

About System One

System One is a leading provider of specialized, highly technical outsourced services, workforce solutions, staffing, and recruiting to critical infrastructure, technology, life sciences, and government sectors As an essential partner to private and public organizations of various needs and sizes, we offer our expertise to help them bring their most complex and mission-critical programs to fruition.

With our highly specialized services, in-demand technical skills, and vast operational expertise, we can deliver accelerated results that benefit our clients and the job seekers who partner with us. We staff contract, contract-to-hire, and direct-hire professionals across our network to work with our clients, some of whom are industry leaders and nationally branded organizations.

Our dedicated team of recruiters work tirelessly to match jobseekers with careers that align with their skills, aspirations, and goals.

We understand that finding the right job can be a transformative experience, and we are committed to supporting jobseekers throughout their career journeys. Our recruitment services are designed to connect individuals with fulfilling jobs that offer growth and development opportunities.

Whether you're an organization seeking customized workforce solutions, outsourced services, or if you're a jobseeker searching for your next opportunity,

System One is the perfect staffing partner for you.

About_Company_One
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Hybrid in Knoxville, Tennessee

•

Yesterday

Easy Apply

Full-time

$104000

Hybrid in Birmingham, Alabama

•

2d ago

Easy Apply

Full-time

$138600

Hybrid in Birmingham, Alabama

•

8d ago

Easy Apply

Full-time

$156000

Hybrid in Birmingham, Alabama

•

7d ago

Easy Apply

Full-time

$156000

Search all similar jobs