Platform Engineer with Nexus Repository and Sonatype
Hexaware Technologies
Alpharetta, GA, United States
2 days ago
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Apply on www.dice.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Working hours
Regular working hours
Job source
Tech stack
Artificial Intelligence
Amazon Web Services
Amazon Elastic Compute Cloud
Amazon S3
Bash Shell
Continuous Integration
Github
Identity and Access Management
Python (Programming Language)
Apache Maven
Cisco Nexus Switches
NuGet
+14 more
Open Source Technology
Tensorflow
Software Engineering
Software Vulnerability Management
Scripting
Enterprise Software Applications
Sonatype
Gitlab
Build Management
Free and Open-Source Software
Npm(Software)
Functional Programming
Cloudwatch
Oracle Cloud Infrastructure
Job description
- Execute on enterprise software supply chain initiatives, supporting secure software delivery.
- Enhance Sonatype Repository artifact management, IQ firewall policy governance, open-source software lifecycle, and telemetry reporting.
- Implement software approval workflows, quarantine waiver, and lifecycle management processes.
- Coordinate dependency upgrades and vulnerability remediation workflows.
- Support onboarding of emerging ecosystems, including AI/ML frameworks.
- Develop reporting and metrics for software supply chain health, policy compliance, and repository utilization.
- Develop CI/CD artifact signing and verification capabilities for software builds.
- Implement SLSA build provenance and attestations across CI/CD platforms.
- Integrate SBOM generation and software metadata into build and deployment pipelines.
Requirements
- 8+ years of Overall IT Exp.
- 3+ years of Platform Engineering, Software Supply Chain Engineering, or Open Source Governance experience.
- Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository required.
- Experience creating and maintaining automated Open Source Software policies, workflows, and telemetry/reporting for component usage, licensing, and vulnerability tracking.
- Experience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).
- Experience with SLSA provenance, in-toto attestations, or similar frameworks.
- Experience with SBOM generation (CycloneDX, SPDX, Syft).
- CI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions).
- Strong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).
- Strong scripting skills (Python, Bash, or Go).
Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on www.dice.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this roleβ¦