Hexaware Technologies Logo

Hexaware Technologies

DevSecOps Engineer

Posted 2 Days Ago
Be an Early Applicant
Remote
Hiring Remotely in United States
Entry level
Remote
Hiring Remotely in United States
Entry level
Administers and supports Omnissa Workspace ONE, Microsoft Intune, and macOS endpoints while developing ServiceNow and Power BI dashboards, KPIs, and executive reports. Automates reporting and operational workflows using Power Automate, PowerShell, Python, and APIs. Monitors endpoint compliance, system health, and security posture; partners with engineering, security, and operations teams; and documents incidents, resolutions, and change-management activities.
The summary above was generated by AI

Role : DevSecOps Platform Engineering

Location : - Atlanta, GA 5 Days On site Is Must 

Mode of Hire : Only Full time /W2 

Lead design and enablement of enterprise software supply chain initiatives, supporting secure software delivery.
Enhance Sonatype Repository artifact management, IQ firewall policy governance, and open-source software lifecycle.
Define and automate software approval workflows, quarantine waiver, and lifecycle management processes.
Design and enable repository proxy strategies for supported software ecosystems.
Drive dependency upgrades and vulnerability remediation workflows.
Support design and onboarding of emerging ecosystems, including AI/ML frameworks.
Design and enable reporting and metrics for software supply chain health, policy compliance, and repository utilization.
Design and enable CI/CD artifact signing and verification capabilities for software builds.
Design and implement SLSA build provenance and attestations across CI/CD platforms.
Integrate SBOM generation and software metadata into build and deployment pipelines.
Collaborate with security and development teams to improve software supply chain visibility and integrity.


Required Technical Skills

 

9+ years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience.
Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or comparable tooling, e.g., jFrog)
Experience creating and maintaining automated Open-Source Software Evaluation policies and workflows.
Experience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).
Experience with SLSA provenance, in-toto attestations, or similar frameworks.
Experience with SBOM generation (CycloneDX, SPDX, Syft).
CI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions)
Strong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).
Experience integrating security tooling into CI/CD pipelines.
Strong scripting skills (Python, Bash, or Go).
Experience designing and maintaining enterprise Open Source platforms.
Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).
Knowledge of NIST SSDF, Executive Order 14028, and Secure by Design initiatives.

Similar Jobs

29 Days Ago
Easy Apply
Remote
United States
Easy Apply
150K-225K Annually
Senior level
150K-225K Annually
Senior level
Artificial Intelligence • Consumer Web • Digital Media • Fintech • Marketing Tech • Software • Financial Services
Own and mature the company’s DevSecOps and cloud security function. Responsibilities include implementing SOC 2 controls, automating compliance evidence, managing cloud security posture and runtime security, embedding security gates into CI/CD, leading vulnerability remediation, developing auto-remediation and AI-assisted workflows, and securing infrastructure through Terraform and policy-as-code. The role also partners with GRC and corporate security teams while building reusable security tooling and developer-platform guardrails.
Top Skills: Ai/Llm ToolingAspmCi/CdContainer ScanningCspmDependency ScanningInfrastructure As Code (Iac)Policy As CodeSastSbomScaSecret ScanningSIEMSoc 2TerraformVulnerability Management
Yesterday
Remote
USA
100K-120K Annually
Mid level
100K-120K Annually
Mid level
Cloud • Security • Cybersecurity
Operate and maintain multi-cloud AWS, Azure, OCI, and GCP environments using Infrastructure as Code and SRE practices. Develop CI/CD automation, scripts, and deployment infrastructure across Dev, Test, and Production environments. Improve observability, resilience, IAM, networking, and security governance while onboarding FedRAMP cloud services. The role requires cloud experience across at least four relevant areas, including Kubernetes, Terraform, CI/CD, scripting, security testing, and cloud architecture.
Top Skills: AnsibleArtifactoryAviatrixAWSAzureBashBitbucketCloudFormationConfluenceDastGCPGitGitflowGithub FlowGitlabHelmIamInfrastructure As Code (Iac)JenkinsJIRAKubernetesOciOrcaPowershellQmulousSastSplunkSreStig ScannerTerraform
3 Days Ago
Remote or Hybrid
VA, USA
Internship
Internship
Information Technology • Software • Analytics • Cybersecurity
Supports DevSecOps engineering through scripting, debugging, troubleshooting, software testing, system administration, architecture discussions, and research into emerging tools and methodologies. Collaborates with development teams and senior administrators while contributing to technical projects and learning system administration practices. The intern must be a full-time college student and eligible to obtain a Top Secret U.S. government clearance.
Top Skills: BashCi/CdCloud ArchitectureContainersData VisualizationGenerative AiInfrastructure As CodeMachine LearningPowershellPython

What you need to know about the Charlotte Tech Scene

Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.

Key Facts About Charlotte Tech

  • Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
  • Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
  • Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
  • Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
  • Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account