What Working at Hexaware offers:
Hexaware is a dynamic and innovative IT organization committed to delivering cutting-edge solutions to our clients worldwide. We pride ourselves on fostering a collaborative and inclusive work environment where every team member is valued and empowered to succeed.
Hexaware provides access to a vast array of tools that enhance, revolutionize, and advance professional profile. We complete the circle with excellent growth opportunities, chances to collaborate with highly visible customers, chances to work alongside bright brains, and the perfect work-life balance.
With an ever-expanding portfolio of capabilities, we delve deep into and identify the source of our motivation. Although technology is at the core of our solutions, it is still the people and their passion that fuel Hexaware s commitment towards creating smiles.
At Hexaware we encourage to challenge oneself to achieve full potential and propel growth. We trust and empower to disrupt the status quo and innovate for a better future. We encourage an open and inspiring culture that fosters learning and brings talented, passionate, and caring people together.
We are always interested in, and want to support, the professional and personal you. We offer a wide array of programs to help expand skills and supercharge careers. We help discover passion the driving force that makes one smile and innovate, create, and make a difference every day.
The Hexaware Advantage: Your Workplace Benefits
- Excellent Health benefits with low-cost employee premium.
- Wide range of voluntary benefits such as Legal, Identity theft and Critical Care Coverage
- Unlimited training and upskilling opportunities through Udemy and Hexavarsity
Role: DevSecOps Engineer
Location : Alpharetta, GA (5 days onsite from office)
FULLTIME with Hexaware
Knowledge gaps in software supply chain fundamentals, including OSS dependency management, policy evaluation/quarantine, build artifacts, SBOM/SLSA provenance, and artifact signing.
Required Technical Skills:
- Years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience.
- Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or comparable tooling, e.g., jFrog)
- Experience creating and maintaining automated Open-Source Software Evaluation policies and workflows.
- Experience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).
- Experience with SLSA provenance, in-toto attestations, or similar frameworks.
- Experience with SBOM generation (CycloneDX, SPDX, Syft).
- CI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions)
- Strong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).
- Experience integrating security tooling into CI/CD pipelines.
- Strong scripting skills (Python, Bash, or Go).
- Experience designing and maintaining enterprise Open-Source platforms.
- Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).
- Knowledge of NIST SSDF, Executive Order 14028, and Secure by Design initiatives.
Privacy Statement:
The information you provide will be used in accordance with the terms of our and will be used specifically for the business/processing purpose of the event. You should be aware that we may share your details with our approved vendors for this event to be handled successfully.
