DevSecOps Engineer (AWS)

Location: Onsite five days per week in Lafayette, Louisiana; Knoxville, Tennessee; or Birmingham, Alabama

Salary: $89,600–$100,000 annually

Company

hirify.global delivers outsourced services and workforce solutions across North America.

What you will do

• Support enterprise software supply chain security and secure software delivery initiatives.
• Manage artifact repositories and open source policy governance using tools such as Sonatype Nexus and IQ Server.
• Build software approval, quarantine, lifecycle, and automated policy workflows.
• Drive dependency upgrades, vulnerability remediation, SBOM generation, and compliance reporting.
• Implement CI/CD artifact signing, SLSA build provenance, Sigstore/Cosign integrations, and SBOM workflows.
• Onboard emerging technology ecosystems, including AI/ML frameworks, and create supply chain health dashboards and metrics.

Requirements

• Five or more years of experience in DevSecOps, Platform Engineering, or Software Supply Chain roles.
• Hands-on experience with Sonatype Nexus and IQ Server or similar tools such as JFrog Artifactory.
• Experience building automated open source policy workflows and using artifact signing tools such as Sigstore/Cosign, GPG, or Notary.
• Knowledge of SLSA provenance, in-toto attestations, SBOM tools such as CycloneDX, SPDX, or Syft, and OCI registries.
• Strong CI/CD experience, preferably with GitLab, plus AWS experience across IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
• Scripting ability in Python, Bash, or Go and a bachelor's degree in Computer Science, Information Systems, or a related field.

Culture & Benefits

• Direct-hire, full-time permanent position.
• Work in a large-scale AWS-based financial services environment.
• Eligible employees may receive medical, dental, vision, spending account, life insurance, and voluntary plan options.
• Eligible employees may participate in a 401(k) plan.