16 days ago
Responsibilities
- Elicit and document business and technical requirements and translate them into actionable specifications.
- Participate in design cycles, create design concepts, refine prototypes, and coordinate implementation feedback.
- Develop solution specifications and perform validation activities, including simulations.
- Build and refine prototypes and integrate technical systems while resolving interoperability issues.
- Develop and manage open-source software governance policies, evaluation workflows, automation, platforms, and repositories.
- Implement artifact signing, provenance, attestations, SBOM management, and software supply chain security controls.
- Integrate security and compliance controls into CI/CD pipelines and maintain technical documentation.
Requirements
- Experience in DevSecOps, platform engineering, or software supply chain security.
- Hands-on experience with Sonatype Lifecycle, Nexus Repository, JFrog, or comparable solutions.
- Experience developing and managing open-source software governance policies, evaluation workflows, and automation.
- Experience with Sigstore/Cosign, GPG, Notary, SLSA provenance, in-toto attestations, and software supply chain controls.
- Experience generating and managing SBOMs using CycloneDX, SPDX, or Syft.
- Strong AWS experience, including IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
- Proficiency in Python, Bash, or Go and experience supporting enterprise open-source platforms and repositories.
- Familiarity with OCI registries and Maven, npm, PyPI, and NuGet ecosystems.
- Understanding of NIST SSDF, Executive Order 14028, Secure by Design principles, and modern software supply chain security practices.
- Preferred qualifications include securing AI/ML open-source ecosystems, enterprise open-source platform engineering, governance metrics and dashboards, and GitLab or GitHub Actions experience.
- Bachelor's degree or foreign equivalent from an accredited institution, with three years of progressive specialty experience considered in lieu of each year of education.
- Applicants authorized to work in the United States are encouraged to apply.
Benefits
- Medical, dental, vision, and life insurance.
- Long-term and short-term disability coverage.
- Health and dependent care reimbursement accounts.
- Accident, critical illness, hospital indemnity, and legal insurance.
- 401(k) plan with contributions dependent on salary level.
- Paid holidays and paid time off.
- Full-time position that may require relocation and/or travel to the work or project location.
About Infosys
Infosys is a public IT services and consulting company that builds and runs software systems for large enterprises across industries. It provides consulting, systems integration, cloud and AI services, engineering, and business process outsourcing, and sells platforms such as EdgeVerve's Finacle core banking suite. Founded in 1981 and headquartered in Bangalore, it serves clients in 50+ countries and is listed on the NSE, BSE, and NYSE.