Back to Jobs
Recently postedEngineering

DevSecOps Engineer

TechSpace Solutions Inc.Richardson, TX🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeHybrid
LocationRichardson, TX, United States

Job description

Job Title: DevSecOps Engineer
Location: Richardson, TX 75082 (Hybrid)
Duration: 12+ Months
Must Have Skills:
  • 5+ years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience
  • Handson experience with Sona type Lifecycle (IQ Server) and Nexus Repository (or comparable tooling
  • Experience creating and maintaining automated Open-Source Software Evaluation policies and workflows
Nice to have skills:
  • Experience with SLSA provenance, into attestations, or similar frameworks
  • Experience with SBOM generation (CycloneDX, SPDX, Syft).
Detailed Job Description:
  • Lead design and enablement of enterprise software supply chain initiatives, supporting secure software delivery.
  • Enhance Sonatype Repository artifact management, IQ firewall policy governance, and opensource software lifecycle.
  • Define and automate software approval workflows, quarantine waiver, and lifecycle management processes.
  • Design and enable repository proxy strategies for supported software ecosystems.
  • Drive dependency upgrades and vulnerability remediation workflows.
  • Support design and onboarding of emerging ecosystems, including AIML frameworks.
  • Design and enable reporting and metrics for software supply chain health, policy compliance, and repository utilization.
  • Design and enable CICD artifact signing and verification capabilities for software builds.
  • Design and implement SLSA build provenance and attestations across CICD platforms.
  • Integrate SBOM generation and software metadata into build and deployment pipelines.
  • Collaborate with security and development teams to improve software supply chain visibility and integrity.

Similar jobs