Sr. DevSecOps Engineer

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US . We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India . Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Job Title: Sr. DevSecOps Engineer




Remote




6 Months




Rate:90$ to 95$ per hour on W2

Key Responsibilities

Software Supply Chain Security

• Lead deployment and operationalization of Socket.dev across enterprise development environments.

• Implement software dependency security controls and risk management processes.

• Establish governance for open-source software consumption and dependency management.

• Partner with development teams to identify and remediate supply chain risks.

• Support implementation of Software Bill of Materials (SBOM) strategies. Chainguard Implementation

• Deploy and integrate Chainguard images and related security capabilities into containerized environments.

• Assist with enterprise adoption of secure-by-default container images.

• Support migration from legacy container images to hardened Chainguard images.

• Develop standards and best practices for container image security.

• Establish image governance, lifecycle management, and vulnerability remediation processes. DevSecOps & CI/CD Integration

• Integrate Socket.dev and Chainguard into CI/CD pipelines and developer workflows.

• Implement automated security checks throughout the software development lifecycle.

• Collaborate with platform engineering teams to improve security automation.

• Enhance release pipelines through automated policy enforcement and compliance controls.

• Support secure software delivery initiatives. Cloud & Container Security

• Secure Kubernetes and container-based environments.

• Assist with container security architecture and operational best practices.

• Implement image scanning, signing, and provenance validation processes.

• Work with engineering teams to improve cloud-native security controls. Collaboration & Enablement

• Work closely with application development teams to drive tool adoption.

• Provide technical guidance and knowledge transfer to developers and platform teams.

• Develop documentation, implementation standards, and operational runbooks.

• Support security assessments and compliance initiatives related to software supply chain security. Required Qualifications

• 5+ years of experience in DevOps, DevSecOps, Application Security, or Cloud Security.

• Experience implementing software supply chain security controls.

• Strong understanding of CI/CD pipelines and secure development practices.

• Experience with GitHub, GitLab, Azure DevOps, or similar platforms.

• Experience working with containerized environments.

• Knowledge of open-source dependency management and vulnerability remediation.

• Strong troubleshooting and communication skills. Qualifications

• Experience deploying or supporting Socket.dev.

• Experience deploying or supporting Chainguard.

• Kubernetes and container platform experience.

• Experience with:

• GitHub Advanced Security

• Sonatype

• JFrog

• Aqua Security

• Prisma Cloud

• Snyk

• Azure DevOps

• GitLab CI/CD

• GitHub Actions

• OpenShift

• Kubernetes

• Docker

• Experience with:

• Secure SDLC practices

• Software Composition Analysis (SCA)

• Sigstore/Cosign

• Container image signing

• SBOMs

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.