Senior DevSecOps Engineer

Senior DevSecOps Engineer
Permanent Full-Time
Lafayette, LA | Knoxville, TN | Birmingham, AL | Columbia SC

• Enhance artifact management, policy governance, and open-source lifecycle processes using tools such as Sonatype Lifecycle (IQ Server), Nexus Repository, or JFrog .
• Build and automate software approval workflows , including quarantine and waiver processes.
• Develop and maintain repository proxy strategies across supported software ecosystems.
• Drive dependency upgrades and vulnerability remediation initiatives.
• Support onboarding of emerging ecosystems, including AI/ML frameworks .
• Build reporting and metrics for:
  • Software supply chain health
  • Policy compliance
  • Repository utilization
• Enable CI/CD artifact signing and verification .
• Implement SLSA build provenance and attestations .
• Integrate SBOM generation into build and deployment pipelines.
• Partner with security and development teams to improve software supply chain visibility, integrity, and security across the organization.
• Help build secure and trustworthy software delivery pipelines at enterprise scale.

• 5+ years of experience in:
  • DevSecOps
  • Platform Engineering
  • Software Supply Chain Engineering
• Hands-on experience with:
  • Sonatype Lifecycle / IQ Server
  • Nexus Repository
  • Or similar tools such as JFrog
• Experience building and maintaining automated Open Source Software evaluation policies and workflows .
• Experience with artifact signing technologies such as:
  • Sigstore
  • Cosign
  • GPG
  • Notary
• Experience with:
  • SLSA provenance
  • in-toto attestations
  • Similar software supply chain frameworks
• Experience generating SBOMs using:
  • CycloneDX
  • SPDX
  • Syft
• Strong CI/CD experience, preferably:
  • GitLab
  • GitHub Actions also acceptable
• Strong AWS experience with:
  • IAM
  • ECS / EKS
  • EC2
  • S3
  • Lambda
  • Step Functions
  • CloudWatch
• Experience integrating security tooling directly into CI/CD pipelines .
• Strong scripting skills in:
  • Python
  • Bash
  • Go
• Experience maintaining enterprise open-source platforms .
• Familiarity with OCI registries and package ecosystems such as:
  • Maven
  • npm
  • PyPI
  • NuGet
• Knowledge of:
  • NIST SSDF
  • Executive Order 14028
  • Secure by Design principles

Educational Requirement
Bachelor’s degree in Computer Science, Information Systems, or a related field.

System One, and its subsidiaries including Joulé, ALTA IT Services, TeamPeople, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.