Administers and supports Omnissa Workspace ONE, Microsoft Intune, and macOS endpoints while developing ServiceNow and Power BI dashboards, KPIs, and executive reports. Automates reporting and operational workflows using Power Automate, PowerShell, Python, and APIs. Monitors endpoint compliance, system health, and security posture; partners with engineering, security, and operations teams; and documents incidents, resolutions, and change-management activities.
Role: DevSecOps Platform Engineer
Location: Atlanta, GA (On site 5 days)
Type of Hire: Full time/W2
Job Description:
- Lead design and enablement of enterprise software supply chain initiatives, supporting secure software delivery.
- Enhance Sonatype Repository artifact management, IQ firewall policy governance, and open-source software lifecycle.
- Define and automate software approval workflows, quarantine waiver, and lifecycle management processes.
- Design and enable repository proxy strategies for supported software ecosystems.
- Drive dependency upgrades and vulnerability remediation workflows.
- Support design and onboarding of emerging ecosystems, including AI/ML frameworks.
- Design and enable reporting and metrics for software supply chain health, policy compliance, and repository utilization.
- Design and enable CI/CD artifact signing and verification capabilities for software builds.
- Design and implement SLSA build provenance and attestations across CI/CD platforms.
- Integrate SBOM generation and software metadata into build and deployment pipelines.
- Collaborate with security and development teams to improve software supply chain visibility and integrity.
Required Technical Skills:
- 9+ years of DevSecOps, Platform Engineering, or Software Supply Chain Engineering experience.
- Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository (or comparable tooling, e.g., jFrog)
- Experience in creating and maintaining automated Open-Source Software Evaluation policies and workflows.
- Experience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).
- Experience with SLSA provenance, in-toto attestations, or similar frameworks.
- Experience with SBOM generation (CycloneDX, SPDX, Syft).
- CI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions)
- Strong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).
- Experience integrating security tooling into CI/CD pipelines.
- Strong scripting skills (Python, Bash, or Go).
- Experience designing and maintaining enterprise Open-Source platforms.
- Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).
- Knowledge of NIST SSDF, Executive Order 14028, and Secure by Design initiatives.
Similar Jobs
Information Technology
Designs and secures AWS and Kubernetes cloud platforms, CI/CD pipelines, infrastructure-as-code solutions, container deployments, and security automation. Integrates vulnerability scanning, compliance monitoring, identity controls, zero-trust principles, and least-privilege access. Troubleshoots complex cloud, application, networking, and operating-system issues; improves cost efficiency and developer workflows; supports regulated and government environments; leads technical discussions, mentors engineers, and promotes secure engineering practices.
Top Skills:
Amazon EksArgo CdAWSCi/CdContainer ScanningDastDependency ScanningDockerFinopsGitlabHarborHelmIamInfrastructure As CodeIron BankJenkinsKerberosKubernetesLdapLinuxMtlsNginxNode.jsOidcPkiPlatform OneSAMLSastService MeshSQLTerraformZero Trust
Healthtech • Pharmaceutical
Supports an enterprise application security program by administering application security testing and posture management tools, integrating security solutions into CI/CD pipelines, managing vulnerability findings, and writing Python scripts to automate workflows. The role also contributes to container and artifact security, including image scanning, vulnerability assessment, and dependency validation using tools such as Snyk and JFrog Artifactory.
Top Skills:
AspmAzure DevopsCi/CdContainer SecurityDastDependency ValidationGithub ActionsIastImage ScanningJfrog ArtifactoryPythonSastScaSnyk
Information Technology
Designs and governs secure, scalable CI/CD pipelines and Software Factories across federal programs. Integrates vulnerability scanning, SAST/DAST, compliance checks, artifact management, configuration management, and automated deployment. Provides technical leadership, troubleshooting, mentorship, cloud adoption guidance, and DevSecOps standardization across distributed teams using cloud-native and containerization technologies.
Top Skills:
Amazon EksAnsibleArgo CdAWSAws CloudformationBashCi/CdDastDnsDockerGitGithub ActionsGitlab Ci/CdHelmHttp/HttpsJenkinsKubernetesLinuxOpenshiftPowershellPythonSastSQLTerraformWindows Server
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
