4 days ago
USA (city not specified)Senior
Base Salary
$81k - $106k/yr
Responsibilities
- Elicit and document business and technical requirements and translate them into actionable specifications.
- Participate in engineering design cycles, develop prototypes, perform validation and simulations, and incorporate testing feedback.
- Undertake technical integration, resolve interoperability issues, and ensure system functionality.
- Develop and manage open-source software governance policies, evaluation workflows, and automation.
- Implement artifact signing, integrity verification, SLSA provenance, in-toto attestations, SBOM processes, and software supply chain security controls.
- Design, deploy, and support enterprise open-source platforms, repositories, OCI registries, and package ecosystems.
- Integrate security and compliance controls into CI/CD pipelines and automate security processes using Python.
- Maintain technical documentation and support knowledge-sharing activities.
Requirements
- Experience in DevSecOps and enterprise open-source platform or repository engineering.
- Hands-on experience with Sonatype Lifecycle (IQ Server), Nexus Repository, JFrog, or a comparable solution.
- Experience developing and managing OSS governance policies, evaluation workflows, and automation.
- Knowledge of Sigstore/Cosign, GPG, Notary, SLSA provenance, in-toto attestations, and software supply chain security controls.
- Experience generating and managing SBOMs using CycloneDX, SPDX, or Syft.
- Experience with AWS services including IAM, ECS/EKS, EC2, S3, Lambda, Step Functions, and CloudWatch.
- Proficiency in Python scripting and automation, plus familiarity with Maven, npm, PyPI, and NuGet ecosystems.
- Understanding of NIST SSDF, Executive Order 14028, Secure by Design principles, and modern software supply chain security.
- Bachelor’s degree or foreign equivalent from an accredited institution, with progressive specialty experience accepted in lieu of education.
- Preferred qualifications include securing AI/ML open-source ecosystems, developing governance metrics and dashboards, and using GitLab or GitHub Actions.
Benefits
- Medical, dental, vision, and life insurance.
- Long-term and short-term disability coverage.
- Health and dependent care reimbursement accounts.
- Accident, critical illness, hospital indemnity, and legal insurance.
- 401(k) plan with contributions dependent on salary level.
- Paid holidays and paid time off.
- Full-time role based in Reston, Virginia, with possible relocation and/or travel requirements.
About Infosys
Infosys is a public IT services and consulting company that builds and runs software systems for large enterprises across industries. It provides consulting, systems integration, cloud and AI services, engineering, and business process outsourcing, and sells platforms such as EdgeVerve's Finacle core banking suite. Founded in 1981 and headquartered in Bangalore, it serves clients in 50+ countries and is listed on the NSE, BSE, and NYSE.