{"id":2764622,"url":"https://alion.io/job/hexaware-technologies-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":1478,"name":"Hexaware Technologies","domain":"hexaware.com","url":"https://alion.io/company/hexaware-technologies","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":80,"open_postings":14,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":136000,"max_usd":271000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":376},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"Cosign","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"GPG","optional":false},{"name":"IAM","optional":false},{"name":"Nexus Repository","optional":false},{"name":"npm","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false},{"name":"Sonatype Nexus IQ","optional":false},{"name":"Syft","optional":false},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-15T19:01:56Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-17T07:52:35Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Role : DevSecOps Platform Engineering\nLocation : - Atlanta, GA 5 Days On site Is Must\nMode of Hire : Only Full time /W2\nLead design and enablement of enterprise software supply chain initiatives, supporting secure software delivery.\nEnhance Sonatype Repository artifact management, IQ firewall policy governance, and open-source software lifecycle.\nDefine and automate software approval workflows, quarantine waiver, and lifecycle management processes.\nDesign and enable repository proxy strategies for supported software ecosystems.\nDrive dependency upgrades and vulnerability remediation workflows.\nSupport design and onboarding of emerging ecosystems, including AI/ML frameworks.\nDesign and enable reporting and metrics for software supply chain health, policy compliance, and repository utilization.\nDesign and enable CI/CD artifact signing and verification capabilities for software builds.\nDesign and implement SLSA build provenance and attestations across CI/CD platforms.\nIntegrate SBOM generation and software metadata into build and deployment pipelines.\nCollaborate with security and development teams to improve software supply chain visibility and integrity.\nRequired Technical Skills\n9+ years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience.\nHands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or comparable tooling, e.g., jFrog)\nExperience creating and maintaining automated Open-Source Software Evaluation policies and workflows.\nExperience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).\nExperience with SLSA provenance, in-toto attestations, or similar frameworks.\nExperience with SBOM generation (CycloneDX, SPDX, Syft).\nCI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions)\nStrong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).\nExperience integrating security tooling into CI/CD pipelines.\nStrong scripting skills (Python, Bash, or Go).\nExperience designing and maintaining enterprise Open Source platforms.\nFamiliarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).\nKnowledge of NIST SSDF, Executive Order 14028, and Secure by Design initiatives.","description_format":"text","description_chars":2243,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-10-17T03:35:41Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":14,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/hexaware-technologies-devsecops-engineer","json_url":"https://alion.io/job/hexaware-technologies-devsecops-engineer.json","meta":{"generated_at":"2026-10-17T16:00:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21779,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1478},"rest":"https://alion.io/mcp/rest/get_company?id=1478"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhexaware-technologies-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhexaware-technologies-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhexaware-technologies-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hexaware-technologies-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhexaware-technologies-devsecops-engineer"}]}