Senior DevSecOps Engineer (AWS)

Location: 5 days onsite in Lafayette, Louisiana; Knoxville, Tennessee; or Birmingham, Alabama, United States

Salary: $89,600–$139,300 per year

Company

hirify.global provides outsourced services and workforce solutions across North America.

What you will do

• Enhance artifact management, policy governance, and open source lifecycle processes using Sonatype Lifecycle and Nexus Repository.
• Build automated software approval, quarantine, waiver, and repository proxy workflows.
• Drive dependency upgrades, vulnerability remediation, and onboarding of emerging ecosystems including AI/ML frameworks.
• Develop reporting and metrics for software supply chain health, policy compliance, and repository utilization.
• Implement CI/CD artifact signing and verification, SLSA provenance, attestations, and SBOM generation.
• Collaborate with security and development teams to improve software supply chain visibility and integrity.

Requirements

• 5+ years of experience in DevSecOps, Platform Engineering, or Software Supply Chain Engineering.
• Hands-on experience with Sonatype Lifecycle, Nexus Repository, or comparable repository management tools.
• Experience creating automated open source evaluation policies and workflows.
• Knowledge of artifact signing technologies, SLSA provenance, attestations, and SBOM tools such as CycloneDX, SPDX, or Syft.
• CI/CD experience and strong AWS skills across IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
• Bachelor's degree in Computer Science, Information Systems, or a related field.

Nice to have

• GitLab CI/CD experience; GitHub Actions experience is also welcome.
• Experience with OCI registries and Maven, npm, PyPI, or NuGet ecosystems.
• Knowledge of NIST SSDF, Executive Order 14028, and Secure by Design principles.

Culture & Benefits

• Direct-hire, full-time permanent employment.
• Medical, dental, and vision coverage options.
• Spending accounts, life insurance, and voluntary benefit plans.
• Participation in a 401(k) plan.