> Markdown version of [/jobs/ext/4567011-full-stack-devsecops-platform-engineer](https://www.wearedevelopers.com/jobs/ext/4567011-full-stack-devsecops-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Full Stack + DevSecOps Platform Engineer - **Company:** ConglomerateIT LLC - **Location:** Jersey City, NJ, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Artificial Intelligence, Amazon Web Services, Amazon S3, Cipher, Cloud Engineering, Code Review, Continuous Integration, DevOps, Amazon DynamoDB, Identity and Access Management, Python (Programming Language), Key Management, Node.Js, RSA (Cryptosystem), Secure Hash Algorithm, Software Engineering, Diagnostic Tools, Transport Layer Security, Spring-boot, Sonatype, Veracode, AI Coding Agents, Backend, Build Management, Gitlab-ci, Enterprise Integration, Checkmarx, Claude, Cloudwatch, Api Gateway, Kibana, Restful APIs, Splunk, Devsecops, Jenkins, Vulnerability Analysis, Programming Languages, Microservices - **Published:** November 4, 2026 - **Apply:** https://www.thejobnetwork.com/job/64c66f26-47c8-4835-b0de-70eb91ac921d/full-stack-devsecops-platform-engineer ## About the Role Backend & Platform Engineering * Strong hands-on backend development experience with Java/Spring Boot. * Experience with at least one additional programming language: + Node.js + Python + Go * Experience building: + REST APIs + Microservices + Batch jobs + Platform integrations CI/CD & DevSecOps * Hands-on experience with: + Jenkins + GitLab CI/CD * Strong understanding of: + SBOM + Dependency scanning + Transitive dependencies + CVEs + Container image scanning CBOM & Cryptography Security Good understanding of CBOM and crypto inventory, including: * TLS/HTTPS * Certificates * Keys * Cipher suites * Encryption algorithms * Hashing algorithms * Signing algorithms * Keystores / Truststores * Secrets management Ability to identify weak cryptography such as: * MD5 * SHA-1 * DES / 3DES * RC4 * RSA-1024 * TLS 1.0 / TLS 1.1 * Disabled certificate validation AWS Cloud Experience Hands-on AWS experience with services such as: * Lambda * API Gateway * S3 * DynamoDB * IAM * ECS / EKS * CloudWatch * X-Ray * Secrets Manager * KMS Monitoring & Troubleshooting * Experience with monitoring and troubleshooting tools such as: + Splunk + ELK / Kibana + CloudWatch + X-Ray * Strong troubleshooting skills across ## Description We are looking for a hands-on Senior Full Stack + DevSecOps Platform Engineer to design and build an internal security automation platform focused on SBOM/CBOM inventory, vulnerability scanning, and AI-assisted auto-remediation using Claude. This is not a traditional full-stack developer role. The ideal candidate should have strong expertise across application development, CI/CD, cloud engineering, security scanning, cryptography inventory, and remediation automation. Key Responsibilities * Design and build a centralized platform for SBOM and CBOM inventory. * Scan applications, repositories, containers, dependencies, certificates, keys, crypto algorithms, TLS/HTTPS configurations, secrets, and runtime components. * Build and integrate Jenkins/GitLab CI/CD pipelines for: + SBOM scanning + CBOM scanning + Vulnerability scanning + Container scanning + Code scanning + Crypto policy scans * Identify: + Vulnerable dependencies + CVEs + Weak cryptography + Expired certificates + Insecure TLS versions + Hardcoded secrets + Non-compliant libraries * Build dashboards and reporting for: + Application inventory + Vulnerability posture + Crypto posture + Remediation status + SLA tracking * Integrate security tools such as: + Syft + Grype + CycloneDX + JFrog Xray + Sonatype + Checkmarx + Fortify + Veracode + Similar enterprise security tools * Build AI-assisted remediation workflows using Claude or similar AI coding agents. * Automate safe fixes including: + Dependency upgrades + Base image updates + Configuration changes + Pull request creation * Ensure all remediations pass through: + Build validation + Testing + Security scans + Approval workflows + Audit checks + Rollback mechanisms before merge or deployment. * Collaborate closely with Application, Security, DevOps, and Platform Engineering teams.