Search Jobs | Dice.com

Job Details

Skills

FOCUS
Software Development
Security Controls
Enterprise Software
Lifecycle Management
Proxies
Management
Onboarding
Emerging Technologies
Artificial Intelligence
Machine Learning (ML)
Dashboard
Meta-data Management
Regulatory Compliance
DevSecOps
IQ
Nexus
JFrog
Open Source
Operations Support Systems
Workflow
Supply Chain Management
GitLab
GitHub
Amazon Web Services
Amazon EC2
Amazon S3
Step-Functions
Continuous Integration
Continuous Delivery
Scripting
Python
Bash
OCI
Apache Maven
NuGet

FOCUS
Software Development
Security Controls
Enterprise Software
Lifecycle Management
Proxies
Management
Onboarding
Emerging Technologies
Artificial Intelligence
Machine Learning (ML)
Dashboard
Meta-data Management
Regulatory Compliance
DevSecOps
IQ
Nexus
JFrog
Open Source
Operations Support Systems
Workflow
Supply Chain Management
GitLab
GitHub
Amazon Web Services
Amazon EC2
Amazon S3
Step-Functions
Continuous Integration
Continuous Delivery
Scripting
Python
Bash
OCI
Apache Maven
NuGet

Summary

Role: DevSecOps Engineer

Location: Atlanta, GA (Onsite)

Role Overview

We are looking for a senior DevSecOps Engineer with strong expertise in Software Supply Chain Security, DevSecOps, and Platform Engineering. This role will focus on securing the software development lifecycle, enhancing artifact management, implementing supply chain security controls, and enabling secure CI/CD practices across the enterprise.

Key Responsibilities

Lead enterprise software supply chain security initiatives and support secure software delivery practices.
Manage and enhance Sonatype Nexus Repository and IQ Server policies for artifact governance and open-source software compliance.
Design and automate software approval workflows, quarantine processes, waivers, and lifecycle management.
Implement repository proxy strategies across various software ecosystems.
Drive dependency management, vulnerability remediation, and secure package consumption.
Support onboarding of emerging technologies and ecosystems, including AI/ML frameworks.
Develop dashboards and metrics for repository usage, policy compliance, and software supply chain health.
Implement artifact signing and verification using technologies such as Cosign, Sigstore, GPG, or Notary.
Design and implement SLSA provenance, build attestations, and secure build frameworks.
Integrate SBOM generation and software metadata into CI/CD pipelines.
Partner with development and security teams to improve software integrity, visibility, and compliance.

Required Skills & Experience

9+ years of experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
Strong hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or equivalent tools such as JFrog Artifactory).
Experience implementing Open Source Software (OSS) governance policies and automated approval workflows.
Expertise in artifact signing technologies (Sigstore/Cosign, GPG, Notary).
Experience with SLSA, in-toto attestations, and software supply chain security frameworks.
Hands-on experience with SBOM tools and standards (CycloneDX, SPDX, Syft).
Strong CI/CD experience using GitLab, GitHub Actions, or similar platforms.
Deep AWS expertise including IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
Experience integrating security tools into CI/CD pipelines.
Strong scripting and automation skills in Python, Bash, or Go.
Knowledge of OCI registries and package ecosystems including Maven, npm, PyPI, and NuGet.
Familiarity with NIST SSDF, Executive Order 14028, and Secure-by-Design principles.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10120222
Position Id: 2026-108851/16603
Posted 7 hours ago

Company Info

About Sage IT Inc

Sage IT is a IT services provider of innovative technology-driven solutions, services and resources. At SAGE, we believe that success results from delivering high quality service while being responsible, flexible, and innovative.

SAGE offers comprehensive application development, technology consulting, business processes re-engineering, professional staffing, implementation and support services for companies all over the world. SAGE also offers industry-specific solutions, strategic outsourcing, and integration services through a unique onsite, offsite, offshore delivery model that helps our customers achieve rapid implementation, world-class quality and reduced costs.

Job Details

Skills

FOCUS
Software Development
Security Controls
Enterprise Software
Lifecycle Management
Proxies
Management
Onboarding
Emerging Technologies
Artificial Intelligence
Machine Learning (ML)
Dashboard
Meta-data Management
Regulatory Compliance
DevSecOps
IQ
Nexus
JFrog
Open Source
Operations Support Systems
Workflow
Supply Chain Management
GitLab
GitHub
Amazon Web Services
Amazon EC2
Amazon S3
Step-Functions
Continuous Integration
Continuous Delivery
Scripting
Python
Bash
OCI
Apache Maven
NuGet

FOCUS
Software Development
Security Controls
Enterprise Software
Lifecycle Management
Proxies
Management
Onboarding
Emerging Technologies
Artificial Intelligence
Machine Learning (ML)
Dashboard
Meta-data Management
Regulatory Compliance
DevSecOps
IQ
Nexus
JFrog
Open Source
Operations Support Systems
Workflow
Supply Chain Management
GitLab
GitHub
Amazon Web Services
Amazon EC2
Amazon S3
Step-Functions
Continuous Integration
Continuous Delivery
Scripting
Python
Bash
OCI
Apache Maven
NuGet

Summary

Role: DevSecOps Engineer

Location: Atlanta, GA (Onsite)

Role Overview

Key Responsibilities

Lead enterprise software supply chain security initiatives and support secure software delivery practices.
Manage and enhance Sonatype Nexus Repository and IQ Server policies for artifact governance and open-source software compliance.
Design and automate software approval workflows, quarantine processes, waivers, and lifecycle management.
Implement repository proxy strategies across various software ecosystems.
Drive dependency management, vulnerability remediation, and secure package consumption.
Support onboarding of emerging technologies and ecosystems, including AI/ML frameworks.
Develop dashboards and metrics for repository usage, policy compliance, and software supply chain health.
Implement artifact signing and verification using technologies such as Cosign, Sigstore, GPG, or Notary.
Design and implement SLSA provenance, build attestations, and secure build frameworks.
Integrate SBOM generation and software metadata into CI/CD pipelines.
Partner with development and security teams to improve software integrity, visibility, and compliance.

Required Skills & Experience

9+ years of experience in DevSecOps, Platform Engineering, or Software Supply Chain Security.
Strong hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or equivalent tools such as JFrog Artifactory).
Experience implementing Open Source Software (OSS) governance policies and automated approval workflows.
Expertise in artifact signing technologies (Sigstore/Cosign, GPG, Notary).
Experience with SLSA, in-toto attestations, and software supply chain security frameworks.
Hands-on experience with SBOM tools and standards (CycloneDX, SPDX, Syft).
Strong CI/CD experience using GitLab, GitHub Actions, or similar platforms.
Deep AWS expertise including IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
Experience integrating security tools into CI/CD pipelines.
Strong scripting and automation skills in Python, Bash, or Go.
Knowledge of OCI registries and package ecosystems including Maven, npm, PyPI, and NuGet.
Familiarity with NIST SSDF, Executive Order 14028, and Secure-by-Design principles.

Dice Id: 10120222
Position Id: 2026-108851/16603
Posted 7 hours ago

Company Info

About Sage IT Inc

Groovy Engineer/ Devops with strong Groovy, Jenkins and AWS - Mclean, VA (Onsite)

Virginia

•

Today

Groovy Engineer/ Devops with strong Groovy, Jenkins and AWS Location: Mclean, VA (Onsite) Duration: Long Term Responsibility: Design and maintain CICD pipelines Design and maintain Access control mechanism Role based access Permissions for pipeline and deployments using Hashicorp vault Develop and maintain Jenkins Shared libraries Develop and maintain DSL pipelines Build and manage Docker images Deployments using Kubernetes and Helm charts Deployment tools using Spinnaker and Rafay Integrate

Easy Apply

Part-time, Third Party, Contract

DevSecOps Engineer - Atlanta, GA (Onsite)

Skills

Summary

Dice Job Match Score™

Similar Jobs

DevSecOps Engineer - Atlanta, GA (Onsite)

Sage IT Inc

Job Details

Skills

Summary

Company Info

About Sage IT Inc

Dice Job Match Score™

Similar Jobs