{"id":3286293,"url":"https://alion.io/job/new-era-technology-devsecops-architect-software-supply-chain-security","title":"DevSecOps Architect – Software Supply Chain Security","company":{"id":4303,"name":"New Era Technology","domain":"neweratech.com","url":"https://alion.io/company/new-era-technology","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":7,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"board_field","remote_working_hours":{"label":"US time zones","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US","CA","MX","AI","AG","AW","BS","BB","BZ","BM","VG","BQ","KY","CR","CW","DM","DO","SV","GL","GD","GP","GT","HT","HN","JM","MQ","MS","NI","PA","PR","KN","LC","VC","PM","SX","TT","TC","VI"],"hiring_countries_total":38,"salary":null,"salary_estimate":{"min_usd":132000,"max_usd":284000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2415},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Cosign","optional":false},{"name":"Docker","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Sigstore","optional":false},{"name":"SLSA","optional":false},{"name":"STRIDE","optional":false},{"name":"Syft","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"OWASP Dependency-Track","optional":true},{"name":"Snyk","optional":true}],"status":"live","first_seen_at":"2026-10-26T18:20:56Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-27T12:36:37Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we're committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale.\nAt New Era, you'll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes - putting people first, embracing continuous learning, and thriving through collaboration and inclusion - we nurture our people to deliver exceptional customer service.\nIf you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work-together\nSecureBlu by New Era Technology is looking for a hands-on DevSecOps Architect specializing in Software Supply Chain Security to help secure software build and release pipelines for our client, Commvault.\nThe ideal candidate will have strong experience securing CI/CD pipelines, managing Software Bills of Materials (SBOMs), implementing artifact signing and provenance verification, and securing Kubernetes environments. This role focuses on hands-on implementation of security controls across the software development lifecycle.\nKey Responsibilities\nDesign and implement software supply chain security controls across build and release pipelines.\n\nSecure GitHub and GitLab environments, including branch protection, signed commits, access controls, and provenance attestation.\n\nImplement SBOM generation, validation, and distribution using Syft, CycloneDX, or SPDX.\n\nIntegrate dependency scanning and vulnerability management into CI/CD pipelines.\n\nImplement artifact signing and verification using Sigstore, Cosign, or in-toto.\n\nDevelop and enforce security-as-code and policy-as-code controls using tools such as Open Policy Agent (OPA), Kyverno, or Conftest.\n\nSecure Kubernetes-based build and deployment environments.\n\nConduct threat modeling for CI/CD pipelines, infrastructure, and AI-assisted development workflows.\n\nAssess risks associated with open-source dependencies, AI-generated code, and AI coding assistants.\n\nAlign security practices with SLSA, NIST SSDF, and NIST SP 800-218.\n\nDevelop security documentation, reference architectures, runbooks, and audit evidence.\n\nCollaborate with security, engineering, platform, and compliance teams.\n\nRequired Qualifications\n5-8 years of experience in DevSecOps, application security, or platform engineering, with direct ownership of CI/CD security.\n\nStrong hands-on experience with GitHub Actions, GitLab pipelines, and enterprise-scale repository administration.\n\nExperience generating and managing SBOMs using SPDX or CycloneDX.\n\nKnowledge of SLSA, NIST SSDF, and NIST SP 800-218.\n\nExperience with artifact signing, provenance, and verification tools such as Sigstore, Cosign, or in-toto.\n\nHands-on Kubernetes security experience, including admission control, network policies, and workload hardening.\n\nExperience with policy-as-code tools such as OPA, Kyverno, or Conftest.\n\nUnderstanding of threat modeling methodologies such as STRIDE or attack trees.\n\nScripting proficiency in Python, Bash, or Go.\n\nFamiliarity with Docker, OCI images, container registries, and container security.\n\nPreferred Qualifications\nExperience with cloud platforms such as AWS, Azure, or Google Cloud.\n\nFamiliarity with vulnerability management tools such as Snyk or Dependency-Track.\n\nExperience working in enterprise or regulated software environments.\n\nPrevious consulting or contract experience supporting distributed engineering teams.\n\nWork Arrangement\nRemote position.\n\nRegular overlap with US business hours is required for cross-team collaboration.\n\nNo routine travel is identified.\n\nEducation: Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.\nInterested candidates are encouraged to apply with their updated resume.\nNew Era Technology, LLC., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”).\nView our Privacy Policy here https://www.neweratech.com/us/privacy-policy/\nWe never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at  .","description_format":"text","description_chars":5098,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"region"},{"name":"Canada","iso":"CA","kind":"region"},{"name":"Mexico","iso":"MX","kind":"region"},{"name":"Anguilla","iso":"AI","kind":"region"},{"name":"Antigua and Barbuda","iso":"AG","kind":"region"},{"name":"Aruba","iso":"AW","kind":"region"},{"name":"Bahamas","iso":"BS","kind":"region"},{"name":"Barbados","iso":"BB","kind":"region"},{"name":"Belize","iso":"BZ","kind":"region"},{"name":"Bermuda","iso":"BM","kind":"region"},{"name":"British Virgin Islands","iso":"VG","kind":"region"},{"name":"Bonaire, Sint Eustatius and Saba","iso":"BQ","kind":"region"},{"name":"Cayman Islands","iso":"KY","kind":"region"},{"name":"Costa Rica","iso":"CR","kind":"region"},{"name":"Curaçao","iso":"CW","kind":"region"},{"name":"Dominica","iso":"DM","kind":"region"},{"name":"Dominican Republic","iso":"DO","kind":"region"},{"name":"El Salvador","iso":"SV","kind":"region"},{"name":"Greenland","iso":"GL","kind":"region"},{"name":"Grenada","iso":"GD","kind":"region"},{"name":"Guadeloupe","iso":"GP","kind":"region"},{"name":"Guatemala","iso":"GT","kind":"region"},{"name":"Haiti","iso":"HT","kind":"region"},{"name":"Honduras","iso":"HN","kind":"region"},{"name":"Jamaica","iso":"JM","kind":"region"},{"name":"Martinique","iso":"MQ","kind":"region"},{"name":"Montserrat","iso":"MS","kind":"region"},{"name":"Nicaragua","iso":"NI","kind":"region"},{"name":"Panama","iso":"PA","kind":"region"},{"name":"Puerto Rico","iso":"PR","kind":"region"},{"name":"Saint Kitts and Nevis","iso":"KN","kind":"region"},{"name":"Saint Lucia","iso":"LC","kind":"region"},{"name":"Saint Vincent and the Grenadines","iso":"VC","kind":"region"},{"name":"Saint-Pierre and Miquelon","iso":"PM","kind":"region"},{"name":"Sint Maarten","iso":"SX","kind":"region"},{"name":"Trinidad and Tobago","iso":"TT","kind":"region"},{"name":"Turks and Caicos Islands","iso":"TC","kind":"region"},{"name":"United States Virgin Islands","iso":"VI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Supply Chain","Information Security","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-26T18:31:42Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/new-era-technology-devsecops-architect-software-supply-chain-security","json_url":"https://alion.io/job/new-era-technology-devsecops-architect-software-supply-chain-security.json","meta":{"generated_at":"2026-10-27T15:18:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4257,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4303},"rest":"https://alion.io/mcp/rest/get_company?id=4303"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnew-era-technology-devsecops-architect-software-supply-chain-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnew-era-technology-devsecops-architect-software-supply-chain-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnew-era-technology-devsecops-architect-software-supply-chain-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/new-era-technology-devsecops-architect-software-supply-chain-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnew-era-technology-devsecops-architect-software-supply-chain-security"}]}