JD

Strong experience with build and package management tools such as: Maven, Gradle, npm/yarn, Artifactory/Nexus.

Experience with GitHub Actions, workflow orchestration, reusable workflows, and deployment automation.

Experie1,nce managing software dependencies and package repositories.

Experience implementing and enforcing Secure Software Development Lifecycle (SSDLC) practices.

Robust working knowledge of: Checkmarx (SAST) or similar, Software Composition Analysis (CxOne SCA or similar) tools, SonarQube

Knowledge of open-source license compliance and OSS governance practices.

Experience with dependency scanning, vulnerability management, and remediation.

SBOM (Software Bill of Materials) generation and management

Experience with: Node.js, Bash/Shell scripting

Experience with: Docker, Docker Compose, Container security scanning, GitHub Container Registry (GHCR) or equivalent artifact repositories.

Knowledge of GitHub Advanced Security capabilities is highly preferred.

Exposure to public cloud platforms (Azure/AWS), enterprise vulnerability management platforms such as Wiz or Aqua

📌 DevOps Engineer (Bengaluru)
🏢 Info way Solutions
📍 Bengaluru