Назад
Company hidden
5 дней назад

DevSecOps Engineer (AWS)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
DevSecOps Engineer (AWS): Supporting secure software delivery and software supply chain security with an accent on artifact governance, vulnerability remediation, CI/CD signing, SLSA provenance, and SBOM integration. Focus on building approval and quarantine workflows, onboarding AI/ML ecosystems, and creating compliance dashboards for enterprise delivery pipelines.

Location: Lafayette, Louisiana, United States; hybrid work with onsite and remote components

Company

hirify.global delivers outsourced services and workforce solutions across North America.

What you will do

  • Support secure software delivery through enterprise software supply chain initiatives.
  • Manage artifact repositories and open source policy governance.
  • Build software approval, quarantine, and lifecycle workflows.
  • Drive dependency upgrades and vulnerability remediation.
  • Onboard emerging technology ecosystems, including AI/ML frameworks.
  • Implement artifact signing, SLSA build provenance, SBOM integration, and supply chain health dashboards.

Requirements

  • 5+ years of experience in DevSecOps, platform engineering, or software supply chain roles.
  • Hands-on experience with Sonatype Nexus and IQ Server or similar tools such as JFrog Artifactory.
  • Experience building automated open source policy workflows and using artifact signing tools such as Sigstore/Cosign, GPG, or Notary.
  • Familiarity with SLSA provenance, in-toto attestations, and SBOM tools including CycloneDX, SPDX, or Syft.
  • Strong CI/CD experience, preferably with GitLab, plus AWS experience across IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
  • Scripting skills in Python, Bash, or Go; familiarity with OCI registries and Maven, npm, PyPI, or NuGet; bachelor's degree in a related field.

Culture & Benefits

  • Direct-hire employment with a 40-hour work week.
  • Medical, dental, and vision coverage options.
  • Spending accounts, life insurance, and voluntary benefit plans.
  • Participation in a 401(k) plan.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →