Start searching
Back to Jobs
Recently postedEngineering

Senior DevSecOps Engineer

SysMind, LLCRichardson, TX🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeHybrid
LocationRichardson, TX, United States

Job description

Location: Richardson, TX 75082
Contract Duration: 12 Months
Experience Required: 8–10 Years

Job Description

We are seeking an experienced Senior DevSecOps Engineer – Software Supply Chain Security to support enterprise software supply chain initiatives and enable secure software delivery.

The ideal candidate will have hands-on experience with Sonatype Lifecycle (IQ Server), Nexus Repository, open-source software governance, and automated software evaluation policies and workflows. The role will focus on artifact management, software approval processes, dependency upgrades, vulnerability remediation, CI/CD artifact signing, and software supply chain security.

Key Responsibilities

  • Execute enterprise software supply chain initiatives to support secure software delivery.

  • Enhance Sonatype Repository artifact management and IQ Firewall policy governance.

  • Manage and improve open-source software lifecycle processes.

  • Implement software approval workflows, quarantine processes, waivers, and lifecycle management procedures.

  • Coordinate dependency upgrades and vulnerability remediation workflows.

  • Support the onboarding of emerging ecosystems, including AI/ML frameworks.

  • Develop reports and metrics to track software supply chain health, policy compliance, and repository utilization.

  • Develop CI/CD artifact signing and verification capabilities for software builds.

  • Implement SLSA build provenance and attestations across CI/CD platforms.

  • Integrate SBOM generation and software metadata into build and deployment pipelines.

  • Collaborate with security, development, and platform engineering teams to improve software supply chain visibility and integrity.

Required Qualifications

  • 8–10 years of overall professional experience.

  • At least 3 years of experience in DevSecOps, Platform Engineering, or Software Supply Chain Engineering.

  • Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository or comparable tools.

  • Experience creating and maintaining automated Open Source Software (OSS) policies and workflows.

  • Strong AWS experience.

  • Knowledge of software artifact management and repository governance.

  • Experience with CI/CD pipelines and secure software delivery practices.

  • Understanding of software approval workflows, quarantine processes, waivers, and vulnerability remediation.

  • Strong analytical, troubleshooting, and problem-solving skills.

Primary Skills

  • DevSecOps

  • Software Supply Chain Security

  • Sonatype Lifecycle (IQ Server)

  • Nexus Repository

  • Open Source Software (OSS) Governance

  • AWS

  • Software Approval Policies and Workflows

Secondary Skills

  • Artifact Signing and Verification

  • SLSA Build Provenance

  • in-toto Attestations

  • SBOM Generation

  • CI/CD Pipeline Security

  • Dependency Management

  • Vulnerability Remediation

  • AI/ML Framework Onboarding

  • Repository Management and Reporting


All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
We are committed to providing reasonable accommodations to qualified applicants with disabilities and for sincerely held religious beliefs, as required by applicable law. Applicants who require a reasonable accommodation during the hiring process may request assistance.
Employment may be contingent upon the successful completion of job-related pre-employment screening, which may include background and reference checks and, where permitted by applicable law and applicable to the position, drug testing. All such screening will be conducted in accordance with applicable federal, state, and local laws.

Similar jobs

Apply