Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 22 hours ago

DevSecOps Architect – Software Supply Chain Security

New Era Technology79 open roles

Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDevSecOps Architect – Software Supply Chain SecurityNew Era Technology · Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on New Era Technology's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. New Era Technology postings stay open a median of 26 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 22 hours ago

New Era Technology median: 26 days open

The posting

Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we're committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale.

At New Era, you'll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service.

If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together

SecureBlu by New Era Technology is looking for a hands-on DevSecOps Architect specializing in Software Supply Chain Security to help secure software build and release pipelines for our client, Commvault.

The ideal candidate will have strong experience securing CI/CD pipelines, managing Software Bills of Materials (SBOMs), implementing artifact signing and provenance verification, and securing Kubernetes environments. This role focuses on hands-on implementation of security controls across the software development lifecycle.

Key Responsibilities

  • Design and implement software supply chain security controls across build and release pipelines.
  • Secure GitHub and GitLab environments, including branch protection, signed commits, access controls, and provenance attestation.
  • Implement SBOM generation, validation, and distribution using Syft, CycloneDX, or SPDX.
  • Integrate dependency scanning and vulnerability management into CI/CD pipelines.
  • Implement artifact signing and verification using Sigstore, Cosign, or in-toto.
  • Develop and enforce security-as-code and policy-as-code controls using tools such as Open Policy Agent (OPA), Kyverno, or Conftest.
  • Secure Kubernetes-based build and deployment environments.
  • Conduct threat modeling for CI/CD pipelines, infrastructure, and AI-assisted development workflows.
  • Assess risks associated with open-source dependencies, AI-generated code, and AI coding assistants.
  • Align security practices with SLSA, NIST SSDF, and NIST SP 800-218.
  • Develop security documentation, reference architectures, runbooks, and audit evidence.
  • Collaborate with security, engineering, platform, and compliance teams.

Required Qualifications

  • 5–8 years of experience in DevSecOps, application security, or platform engineering, with direct ownership of CI/CD security.
  • Strong hands-on experience with GitHub Actions, GitLab pipelines, and enterprise-scale repository administration.
  • Experience generating and managing SBOMs using SPDX or CycloneDX.
  • Knowledge of SLSA, NIST SSDF, and NIST SP 800-218.
  • Experience with artifact signing, provenance, and verification tools such as Sigstore, Cosign, or in-toto.
  • Hands-on Kubernetes security experience, including admission control, network policies, and workload hardening.
  • Experience with policy-as-code tools such as OPA, Kyverno, or Conftest.
  • Understanding of threat modeling methodologies such as STRIDE or attack trees.
  • Scripting proficiency in Python, Bash, or Go.
  • Familiarity with Docker, OCI images, container registries, and container security.

Preferred Qualifications

  • Experience with cloud platforms such as AWS, Azure, or Google Cloud.
  • Familiarity with vulnerability management tools such as Snyk or Dependency-Track.
  • Experience working in enterprise or regulated software environments.
  • Previous consulting or contract experience supporting distributed engineering teams.

Work Arrangement

  • Remote position.
  • Regular overlap with US business hours is required for cross-team collaboration.
  • No routine travel is identified.

Education: Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.

Interested candidates are encouraged to apply with their updated resume.

New Era Technology, LLC., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”).

View our Privacy Policy here https://www.neweratech.com/us/privacy-policy/

We never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at [email protected] .

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against New Era Technology's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on New Era Technology's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    New Era Technology's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.