DevSecOps Architect – Software Supply Chain Security

Job not on LinkedIn

🔥 5 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔗 Supply Chain

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

New Era Technology

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

New Era Technology is a global technology solutions provider offering a wide range of services and solutions, including cloud services, professional and managed services, cybersecurity, collaboration and unified communications, data networking, digital transformation, and physical security. With a team of engineers, designers, installers, and technicians, New Era Technology collaborates with over 20,000 customers and operates through 80+ offices worldwide. They are recognized as a top integrator for AV and video collaboration and offer industry-specific solutions for sectors such as healthcare, education, government, banking, finance, and retail. New Era Technology aims to help businesses adapt to the rapidly changing digital landscape through innovative technology solutions and customized services.

📋 Description

• Design and implement software supply chain security controls across build and release pipelines • Secure GitHub and GitLab environments, including branch protection, signed commits, access controls, and provenance attestation • Implement SBOM generation, validation, and distribution using Syft, CycloneDX, or SPDX • Integrate dependency scanning and vulnerability management into CI/CD pipelines • Implement artifact signing and verification using Sigstore, Cosign, or in-toto • Develop and enforce security-as-code and policy-as-code controls using OPA, Kyverno, or Conftest • Secure Kubernetes-based build and deployment environments • Conduct threat modeling for CI/CD pipelines, infrastructure, and AI-assisted development workflows • Assess risks associated with open-source dependencies, AI-generated code, and AI coding assistants • Align security practices with SLSA, NIST SSDF, and NIST SP 800-218 • Develop security documentation, reference architectures, runbooks, and audit evidence • Collaborate with security, engineering, platform, and compliance teams

🎯 Requirements

• 5–8 years of experience in DevSecOps, application security, or platform engineering, with direct ownership of CI/CD security • Strong hands-on experience with GitHub Actions, GitLab pipelines, and enterprise-scale repository administration • Experience generating and managing SBOMs using SPDX or CycloneDX • Knowledge of SLSA, NIST SSDF, and NIST SP 800-218 • Experience with artifact signing, provenance, and verification tools such as Sigstore, Cosign, or in-toto • Hands-on Kubernetes security experience, including admission control, network policies, and workload hardening • Experience with policy-as-code tools such as OPA, Kyverno, or Conftest • Understanding of threat modeling methodologies such as STRIDE or attack trees • Scripting proficiency in Python, Bash, or Go • Familiarity with Docker, OCI images, container registries, and container security • Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience • Regular overlap with US business hours is required

🏖️ Benefits

• Competitive benefits • Continuous training • Personal and professional development opportunities • Team-oriented, collaborative and inclusive culture • No routine travel identified