DevSecOps Engineer, Software Supply Chain Security

Job overview

The DevSecOps Engineer, Software Supply Chain Security role is onsite five days a week. The listing names Lafayette, LA, Knoxville, TN, and Birmingham, AL as work locations. Compensation is not specified. The role strengthens a software supply chain security program in a large-scale, AWS-based financial services environment. The engineer helps secure software delivery from open-source governance through CI/CD artifact integrity, supporting compliance and security standards. The work includes managing repository and policy tooling, automating vulnerability remediation and software lifecycle workflows, and implementing artifact signing, provenance, and software bill of materials integration.

What you'll do

• Support enterprise software supply chain security initiatives
• manage artifact repository tooling and open-source policy governance
• build software approval, quarantine, and lifecycle workflows
• drive dependency upgrades and vulnerability remediation
• onboard emerging technology ecosystems, including AI/ML frameworks
• create supply chain health and compliance dashboards
• implement CI/CD artifact signing, build provenance, and SBOM integration.

What we're looking for

Skills & competencies

devsecops engineer

software supply chain security

aws

ci/cd

sonatype nexus

artifact signing

slsa

sbom

open-source governance

lafayette la

knoxville tn

birmingham al

onsite

Work arrangement

• Weekend coverage required

Why this role

Requires 5+ years in DevSecOps, platform engineering, or software supply chain roles and a bachelor’s degree in computer science, information systems, or a related field. Relevant tools and technologies include Sonatype Nexus/IQ Server or similar, Sigstore/Cosign, SLSA, SBOM tools, CI/CD, AWS, and Python, Bash, or Go.

About the employer

System One is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.