@ CGI
Position Description:
CGI is seeking a Supply Chain Engineer to lead and enable enterprise initiatives that strengthen secure software delivery.
This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Birmingham, AL
Your future duties and responsibilities:
In this role, you'll enhance artifact management, policy governance, and open source lifecycle processes using tools like Sonatype and Nexus Repository. You'll build and automate software approval workflows, quarantine/waiver processes, and repository proxy strategies across supported ecosystems.
You'll drive dependency upgrades and vulnerability remediation efforts, support onboarding of emerging ecosystems including AI/ML frameworks, and build reporting and metrics to track software supply chain health, policy compliance, and repository utilization. This role also involves enabling CI/CD artifact signing and verification, implementing SLSA build provenance and attestations, and integrating SBOM generation into build and deployment pipelines.
You'll work closely with security and development teams to improve software supply chain visibility and integrity across the organization. This is a great opportunity for someone passionate about DevSecOps and building secure, trustworthy software delivery pipelines at scale.
Required qualifications to be successful in this role:
Educational Requirement:
Skills:
Apply online at: https://www.cgi.com/en/careers
Visit Site to Apply