Open Source Supply Chain Engineer

Grade Level (for internal use): 10

We are seeking a DevSecOps Engineer to help build and support secure, scalable software delivery practices. This role will design and maintain secure CI/CD pipelines, strengthen container and artifact security, and improve automation across the software development lifecycle. The ideal candidate brings hands-on experience with Kubernetes, JFrog Artifactory, and GitHub Enterprise, and collaborates effectively with engineering, platform, and security teams.

• Design and maintain secure CI/CD pipelines using GitHub Enterprise and related automation tools.
• Manage JFrog Artifactory, including repository governance, access controls, and integration with build and release processes.
• Implement Kubernetes security best practices, including RBAC, secrets management, network policies, and image security.
• Embed automated security controls into the delivery lifecycle, such as code, dependency, and container scanning.
• Partner with engineering, platform, and security teams to improve delivery speed, reliability, and risk reduction.
• Support infrastructure-as-code and configuration-as-code to improve consistency and auditability.
• Monitor and troubleshoot pipeline, deployment, and security issues across development and runtime environments.
• Create documentation, standards, and reusable patterns for secure software delivery.

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
• 3+ years of experience in DevOps, DevSecOps, platform engineering, or security engineering.
• Hands-on experience with Kubernetes administration and security controls.
• Experience with JFrog Artifactory in enterprise build and release environments.
• Experience with GitHub Enterprise, including repositories, pull requests, branch protection, and GitHub Actions.
• Understanding of CI/CD, infrastructure automation, and software supply chain security.
• Knowledge of containerization, vulnerability remediation, and scripting with Bash, Python, or similar tools.
• Strong problem-solving, communication, and cross-functional collaboration skills.

• Experience with policy-as-code, secrets management, and runtime security tools.
• Knowledge of artifact scanning, SBOM practices, and open-source dependency governance.
• Experience with Terraform, Helm, or similar infrastructure automation tools.
• Familiarity with compliance, audit controls, and secure engineering standards.

IST: 2:00 PM to 11:00 PM OR 1:00 PM to 10:00 PM