Open Source Supply Chain Engineer
spglobal
Job Description
- Design and maintain secure CI/CD pipelines using GitHub Enterprise and related automation tools.
- Manage JFrog Artifactory, including repository governance, access controls, and integration with build and release processes.
- Implement Kubernetes security best practices, including RBAC, secrets management, network policies, and image security.
- Embed automated security controls into the delivery lifecycle, such as code, dependency, and container scanning.
- Partner with engineering, platform, and security teams to improve delivery speed, reliability, and risk reduction.
- Support infrastructure-as-code and configuration-as-code to improve consistency and auditability.
- Monitor and troubleshoot pipeline, deployment, and security issues across development and runtime environments.
- Create documentation, standards, and reusable patterns for secure software delivery.