DevSecOps Architect – Software Supply Chain Security
New Era Technology · Remote
About the role
DevSecOps Architect specializing in software supply chain security, securing CI/CD pipelines for client Commvault. Hands-on role implementing SBOMs, artifact signing, and Kubernetes security.
What you'll do
- Design and implement software supply chain security controls
- Secure GitHub and GitLab environments
- Implement SBOM generation and artifact signing
- Integrate dependency scanning into CI/CD
- Secure Kubernetes environments
- Conduct threat modeling for CI/CD pipelines
What they're looking for
- 5–8 years in DevSecOps, application security, or platform engineering
- Experience with GitHub Actions and GitLab pipelines
- Knowledge of SLSA, NIST SSDF, NIST SP 800-218
- Experience with SBOM tools (Syft, CycloneDX, SPDX)
- Artifact signing tools (Sigstore, Cosign, in-toto)
- Kubernetes security and policy-as-code (OPA, Kyverno)
Key details
- Company
- New Era Technology
- Location
- Remote
- Work mode
- Remote
- Seniority
- Mid-level
- Employment type
- Full-time
- Role category
- DevOps & SRE
- Experience
- 5–8 years
- Location requirements
- Remote (open to India? Not specified)
- Posted
- 27 Oct 2026
- Source
- job-boards.greenhouse.io