Open Source Supply Chain Engineer
Core
Design and maintain secure CI/CD pipelines, manage artifact repositories, and implement Kubernetes security controls to strengthen software supply chain security.
Role type
DevSecOps Engineer
Builds
Secure software delivery pipelines and containerized applications
Domain
Software Engineering / DevSecOps / Cloud Infrastructure
Required skills
Kubernetes administration, JFrog Artifactory management, GitHub Enterprise, CI/CD pipeline design, container security, Bash/Python scripting, infrastructure automation
Preferred skills
Policy-as-code, secrets management, runtime security tools, Terraform, Helm, SBOM practices, compliance controls
Technologies
Kubernetes, JFrog Artifactory, GitHub Enterprise, Terraform, Helm, Bash, Python
Responsibilities
Design and maintain secure CI/CD pipelines; Manage JFrog Artifactory repository governance and access controls; Implement Kubernetes security best practices (RBAC, secrets, network policies); Embed automated security controls (code, dependency, container scanning); Partner with engineering and security teams to improve delivery speed and reliability; Support infrastructure-as-code and configuration-as-code; Monitor and troubleshoot pipeline and security issues.
Seniority
Mid-level, hands-on IC