Role : DevSecOps Platform Engineering
Location : - Atlanta, GA 5 Days On site Is Must
Mode of Hire : Only Full time /W2
Lead design and enablement of enterprise software supply chain initiatives, supporting secure software delivery.
Enhance Sonatype Repository artifact management, IQ firewall policy governance, and open-source software lifecycle.
Define and automate software approval workflows, quarantine waiver, and lifecycle management processes.
Design and enable repository proxy strategies for supported software ecosystems.
Drive dependency upgrades and vulnerability remediation workflows.
Support design and onboarding of emerging ecosystems, including AI/ML frameworks.
Design and enable reporting and metrics for software supply chain health, policy compliance, and repository utilization.
Design and enable CI/CD artifact signing and verification capabilities for software builds.
Design and implement SLSA build provenance and attestations across CI/CD platforms.
Integrate SBOM generation and software metadata into build and deployment pipelines.
Collaborate with security and development teams to improve software supply chain visibility and integrity.
Required Technical Skills
9+ years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience.
Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or comparable tooling, e.g., jFrog)
Experience creating and maintaining automated Open-Source Software Evaluation policies and workflows.
Experience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).
Experience with SLSA provenance, in-toto attestations, or similar frameworks.
Experience with SBOM generation (CycloneDX, SPDX, Syft).
CI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions)
Strong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).
Experience integrating security tooling into CI/CD pipelines.
Strong scripting skills (Python, Bash, or Go).
Experience designing and maintaining enterprise Open Source platforms.
Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).
Knowledge of NIST SSDF, Executive Order 14028, and Secure by Design initiatives.
Hexaware Technologies San Ramon, California, USA Office
3001 Bishop Drive Suite 300, Office 3108, San Ramon, United States, 94583
Similar Jobs
What you need to know about the San Francisco Tech Scene
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
