Senior DevSecOps Engineer

Job overview

The Senior DevSecOps Engineer role is listed in Knoxville, TN, with additional locations in Lafayette, LA; Birmingham, AL; and Columbia, SC. The posting describes a permanent full-time position but does not specify compensation. The role supports enterprise software supply-chain security and secure software delivery. The engineer strengthens artifact governance, CI/CD security, software provenance, and vulnerability remediation. By partnering with security and development teams, the role helps improve software supply-chain visibility, integrity, and security across the organization.

What you'll do

• Improve artifact management, policy governance, and open-source lifecycle processes
• automate software approval, quarantine, and waiver workflows
• develop repository proxy strategies
• drive dependency upgrades and vulnerability remediation
• support onboarding of emerging ecosystems, including AI/ML frameworks
• build reporting on supply-chain health, policy compliance, and repository use
• enable artifact signing and verification
• implement SLSA provenance and attestations
• integrate SBOM generation into pipelines
• and partner with security and development teams.

What we're looking for

Skills & competencies

senior devsecops engineer

devsecops

software supply chain security

ci/cd

artifact management

sbom

slsa provenance

open-source governance

knoxville tn

lafayette la

birmingham al

columbia sc

aws

Work arrangement

• Weekend coverage required

Why this role

The posting lists Lafayette, LA; Knoxville, TN; Birmingham, AL; and Columbia, SC, and requires experience with software supply-chain tools and frameworks including Sonatype Lifecycle, Nexus Repository, artifact signing, SLSA, and SBOMs.

About the employer

System One is hiring for this role. Industry: Engineering Services. Sector: 54.