DevSecOps Architect – Software Supply Chain Security
New Era Technology · North America
About the role
A hands-on DevSecOps architect for SecureBlu by New Era Technology, securing the software build and release pipelines of its client Commvault. The architect implements supply chain controls across GitHub and GitLab, including branch protection, signed commits and provenance attestation, generates and distributes SBOMs, signs and verifies artifacts with Sigstore, Cosign or in-toto, enforces policy as code with OPA or Kyverno, hardens Kubernetes build environments, and threat-models pipelines and AI-assisted development.
It asks for five to eight years of DevSecOps, appsec or platform work in which the candidate personally owned pipeline security, knowledge of SLSA and NIST SSDF, and Python, Bash or Go. Remote, with overlap with US business hours.