Senior DevSecOps Engineer — Software Supply Chain Security

Job overview

The Senior DevSecOps Engineer role is listed as hybrid across Lafayette, Louisiana; Knoxville, Tennessee; Birmingham, Alabama; and Columbia, South Carolina. Compensation is not specified. The role works with security and development teams to improve software supply chain visibility and integrity. This engineer strengthens software supply chain security by improving artifact governance, automating approval and remediation workflows, and integrating signing, provenance, and software bill of materials practices into build and deployment pipelines.

What you'll do

• Enhance artifact management, policy governance, and open-source lifecycle processes
• automate software approval, quarantine, waiver, and repository proxy workflows
• drive dependency upgrades and vulnerability remediation
• support emerging ecosystems including AI/ML frameworks
• build supply-chain health, compliance, and utilization reporting
• enable CI/CD artifact signing and verification
• implement SLSA provenance and attestations
• integrate SBOM generation into pipelines
• collaborate with security and development teams.

What we're looking for

Skills & competencies

senior devsecops engineer

software supply chain security

hybrid

lafayette la

knoxville tn

birmingham al

columbia sc

system one

sonatype

nexus repository

ci/cd

aws

slsa

sbom

Work arrangement

• Weekend coverage required

Benefits & perks

• Eligible employees may have access to medical, dental, vision, spending accounts, life insurance, voluntary plans, and a 401(k) plan.

Why this role

The posting calls for experience with Sonatype Lifecycle and Nexus Repository or similar tools, SLSA provenance, SBOMs, CI/CD, AWS, and scripting in Python, Bash, or Go.

About the employer

System One is hiring for this role. Industry: Temporary Help Services. Sector: 56.