Job Description

Job Description

About the Role
EdgeVerve Systems is looking for a Senior Member – IP Management (FOSS Compliance) to be part of its central FOSS and IP governance function. The role is responsible for ensuring that all software products and platforms comply with open-source licensing obligations. The individual will work closely with engineering, DevOps, legal, and product teams to identify, assess, and mitigate open-source compliance risks across the organization. This role requires robust hands-on experience in FOSS compliance operations, open-source license interpretation, and SCA tool usage, along with the ability to guide teams on best practices.

Key Responsibilities
• Perform FOSS compliance analysis for software products, services, and platforms.
• Identify and analyze open-source licenses (GPL, LGPL, AGPL, MIT, Apache 2.0, BSD, etc.) and assess their impact on commercial software distribution.
• Maintain and govern an inventory of open-source components used across products.
• Use SCA tools (Black Duck Hub preferred; equivalent tools such as Mend, FOSSA, Snyk acceptable) to identify, track, and manage open-source components.
• Work with engineering and DevOps teams to integrate SCA scans into CI/CD pipelines.
• Support automation of FOSS compliance processes through scripting (primarily Python).
• Conduct open-source risk assessments and recommend remediation strategies.
• Provide guidance to development teams on open-source best practices and license compliance.
• Contribute to the development, implementation, and continuous improvement of FOSS compliance policies and processes.
• Collaborate closely with legal/IP teams for license interpretation, risk classification, and compliance decisions.




• Stay up to date with open-source licensing trends, regulations, and industry best practices.
• Support compliance reviews, audits, and release readiness activities as part of the central governance function. Required Skills & Experience
• Bachelor’s degree in computer science, Engineering, or a related discipline.
•

Experience:
Minimum relevant experience 2 years and 4
- 8 Years overall experience
• Strong working knowledge of:
• Open-source software principles and licensing models
• Application of open-source licenses in commercial software distributions
• Hands-on experience with Black Duck Hub (preferred) or equivalent SCA tools.
• Strong understanding of FOSS identification and dependency linking concepts.
• Experience working with engineering and DevOps teams to integrate compliance scans into pipelines.
• Ability to read and understand source code across languages such as C/C++, Java, and Python.
• Experience writing small automation scripts (Python) to streamline compliance workflows.
• Excellent analytical, problem-solving, and risk assessment skills.
• Strong communication skills with the ability to work across technical and legal stakeholders.
• Business English fluency (written and verbal).
• Preferred Qualifications
• Experience with container image FOSS compliance and SBOM analysis.
• Familiarity with SBOM standards (SPDX, CycloneDX).
• Knowledge of industry frameworks and standards such as OpenChain.
• Exposure to legal and regulatory aspects of open-source software compliance.
• Experience supporting audits and governance activities in large engineering organizations.
• Familiarity with modern software development methodologies and DevOps practices.

📌 Member - IP Management (India)
🏢 EdgeVerve Systems
📍 India