DevSecOps Engineer

Job Title: DevSecOps EngineerLocation: Atlanta, GA (Onsite)Duration: FulltimeRequired Technical Skills9+ years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience.Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or comparable tooling, e.g., jFrog)Experience creating and maintaining automated Open Source Software Evaluation policies and workflows.Experience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).Experience with SLSA provenance, in-toto attestations, or similar frameworks.Experience with SBOM generation (CycloneDX, SPDX, Syft).CI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions)Strong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).Experience integrating security tooling into CI/CD pipelines.Strong scripting skills (Python, Bash, or Go).Experience designing and maintaining enterprise Open Source platforms.Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).Knowledge of NIST SSDF, Executive Order 14028, and Secure by Design initiatives.