{"schemaVersion":"jobsearcher.job.v1","id":"025bddc30d03895ca439fd28","url":"https://jobsearcher.com/jobs/025bddc30d03895ca439fd28","canonicalUrl":"https://jobsearcher.com/jobs/025bddc30d03895ca439fd28","title":"DevSecOps Engineer","description":"Job Title: DevSecOps Engineer\nLocation: Birmingham, AL\nType: Permanent Full Time\nCompensation: Not specified\nWork Model: Hybrid – onsite and remote\nHours: 40.0\nSecurity Clearance: Not specified in the provided details\n\nOverview\nWe are seeking a DevSecOps Engineer to strengthen our software supply chain security program within a large scale, AWS based financial services environment. In this role, you will help secure the software delivery lifecycle — from open source governance to CI/CD artifact integrity — ensuring that software built and deployed across the organization meets rigorous compliance and security standards.\n\nYou'll work hands on with tools like Sonatype Nexus/IQ Server, implement artifact signing and provenance frameworks (SLSA, Sigstore/Cosign), and build automation that supports vulnerability remediation, SBOM generation, and open source policy enforcement. This is a great opportunity for someone who enjoys solving real security problems at scale, working across CI/CD pipelines, cloud infrastructure, and emerging technology ecosystems (including AI/ML tooling).\n\nThis position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Birmingham, AL\n\nResponsibilities\n\nSupport secure software delivery through enterprise supply chain initiatives\nManage and enhance artifact repository tooling and open source policy governance\nBuild and maintain software approval, quarantine, and lifecycle workflows\nDrive dependency upgrades and vulnerability remediation efforts\nOnboard new/emerging technology ecosystems (including AI/ML frameworks)\nCreate dashboards and metrics for supply chain health and compliance\nImplement CI/CD artifact signing, build provenance (SLSA), and SBOM integration\n\nRequirements\n\n5+ years working in DevSecOps, Platform Engineering, or Software Supply Chain roles\nHands on experience with Sonatype Nexus and IQ Server (or similar — jFrog Artifactory is fine too)\nComfortable building and maintaining automated open source policy workflows\nExperience with artifact signing tools like Sigstore/Cosign, GPG, or Notary\nFamiliarity with SLSA provenance and in toto attestations (or similar supply chain security frameworks)\nKnow your way around SBOM generation tools — CycloneDX, SPDX, or Syft\nSolid CI/CD background, ideally with GitLab (GitHub Actions also welcome)\nStrong AWS chops — IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch\nScripting ability in Python, Bash, or Go\nExposure to OCI registries and package ecosystems like Maven, npm, PyPI, or NuGet\nBachelor's degree in Computer Science, Information Systems, or a related field\n\nSystem One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.\n\nSystem One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.\n\n#LI-\nRef: #404-IT Pittsburgh","company":"Systemone","rawCompany":"systemone","city":"Birmingham","state":"AL","isRemote":false,"isActive":false,"createdAt":"2026-10-24T12:10:24.865Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"DevSecOps Engineer","description":"Job Title: DevSecOps Engineer\nLocation: Birmingham, AL\nType: Permanent Full Time\nCompensation: Not specified\nWork Model: Hybrid – onsite and remote\nHours: 40.0\nSecurity Clearance: Not specified in the provided details\n\nOverview\nWe are seeking a DevSecOps Engineer to strengthen our software supply chain security program within a large scale, AWS based financial services environment. In this role, you will help secure the software delivery lifecycle — from open source governance to CI/CD artifact integrity — ensuring that software built and deployed across the organization meets rigorous compliance and security standards.\n\nYou'll work hands on with tools like Sonatype Nexus/IQ Server, implement artifact signing and provenance frameworks (SLSA, Sigstore/Cosign), and build automation that supports vulnerability remediation, SBOM generation, and open source policy enforcement. This is a great opportunity for someone who enjoys solving real security problems at scale, working across CI/CD pipelines, cloud infrastructure, and emerging technology ecosystems (including AI/ML tooling).\n\nThis position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Birmingham, AL\n\nResponsibilities\n\nSupport secure software delivery through enterprise supply chain initiatives\nManage and enhance artifact repository tooling and open source policy governance\nBuild and maintain software approval, quarantine, and lifecycle workflows\nDrive dependency upgrades and vulnerability remediation efforts\nOnboard new/emerging technology ecosystems (including AI/ML frameworks)\nCreate dashboards and metrics for supply chain health and compliance\nImplement CI/CD artifact signing, build provenance (SLSA), and SBOM integration\n\nRequirements\n\n5+ years working in DevSecOps, Platform Engineering, or Software Supply Chain roles\nHands on experience with Sonatype Nexus and IQ Server (or similar — jFrog Artifactory is fine too)\nComfortable building and maintaining automated open source policy workflows\nExperience with artifact signing tools like Sigstore/Cosign, GPG, or Notary\nFamiliarity with SLSA provenance and in toto attestations (or similar supply chain security frameworks)\nKnow your way around SBOM generation tools — CycloneDX, SPDX, or Syft\nSolid CI/CD background, ideally with GitLab (GitHub Actions also welcome)\nStrong AWS chops — IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, CloudWatch\nScripting ability in Python, Bash, or Go\nExposure to OCI registries and package ecosystems like Maven, npm, PyPI, or NuGet\nBachelor's degree in Computer Science, Information Systems, or a related field\n\nSystem One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.\n\nSystem One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.\n\n#LI-\nRef: #404-IT Pittsburgh","datePosted":"2026-10-24T12:10:24.865Z","dateModified":"2026-10-24T12:10:24.865Z","hiringOrganization":{"@type":"Organization","name":"Systemone","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Birmingham","addressRegion":"AL","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"025bddc30d03895ca439fd28"},"url":"https://jobsearcher.com/jobs/025bddc30d03895ca439fd28"}}