Software Supply Chain Engineer (f/m/x)

Software Supply Chain Engineer (f/m/x)

Miejsce pracy: Bydgoszcz

Technologies we use

Expected

• Open Source
• SBOM
• Dependency Management
• Linux
• CycloneDX
• Windows Server

Optional

• Golang
• Syft

Operating system

• Windows
• Linux

About the project

We are looking for an experienced Software Supply Chain Engineer to join our InnerSource & Open Source Office (ISOSO). In this role, you will collaborate with software architects, developers, and cross-functional teams to ensure compliance with open source software usage in our commercial products. This remote position offers you the opportunity to strengthen our Software Supply Chain Compliance & Integrity team and contribute to regulatory compliance in a dynamic environment.

Your responsibilities

• Collaborating with software architects and senior developers to generate comprehensive Software Bills of Materials (SBOM) for commercial products, detailing open source components and dependencies
• Reviewing and analyzing the usage of open source software to ensure compliance with relevant regulations and licenses, considering deployment and architecture implications
• Integrating open source compliance checks into CI/CD pipelines to facilitate early identification of compliance issues and minimize risks
• Managing dependencies for at least two programming languages, such as .NET/C#, Python, Java, C/C++, or Node.JS/TypeScript, while considering both proprietary and open source components
• Creating and maintaining clear compliance documentation, including policies and best practices, to foster a compliant development environment
• Utilizing expertise in CycloneDX to enhance the accuracy and efficiency of compliance processes
• Staying informed about industry regulations, particularly FDA requirements, to ensure alignment with current and emerging standards
• Providing training and support to development teams on open source compliance practices, fostering a culture of awareness and responsibility
• Driving upstream contributions to Syft in Golang to enhance its capabilities in artifact analysis and supply chain security

Our requirements

• Minimum 5 years of experience in software development with a strong focus on open source compliance
• Bachelor's degree in Computer Science, Software Engineering, or a related field
• Proven experience with CI/CD pipelines and integrating open source compliance checks into the development process
• Thorough understanding of open source licenses and best practices for compliance
• Demonstrable experience working with CycloneDX or similar SBOM formats
• Proficiency in managing dependencies across multiple programming languages such as .NET/C#, Python, Java, C/C++, Node.JS/TypeScript
• Familiarity with both Linux and Windows operating systems and their interactions with open source components
• Fluent English and Polish
• Residence in Poland

Optional

• Experience in regulated industries such as healthcare or medical devices
• Knowledge of container and virtual machine technologies
• Deep familiarity with Golang and the Syft codebase is highly desired

What we offer

• Great Place to Work since 2015 - it’s thanks to feedback from our workers that we get this special title and constantly implement new ideas
• Employment stability - revenue of PLN 2.1BN, no debts, since 2006 on the market
• We share the profit with Workers - over PLN 76M has already been allocated for this aim since 2022
• Attractive benefits package - private healthcare, benefits cafeteria platform, car discounts and more
• Comfortable workplace – class A offices or remote work
• Dozens of fascinating projects for prestigious brands from all over the world – you can change them thanks to Job Changer application
• PLN 1 000 000 per year for your ideas - with this amount, we support the passions and voluntary actions of our workers
• Investment in your growth – meetups, webinars, training platform and technology blog – you choose
• Fantastic atmosphere created by all Sii Power People

This is how we work on a project

• Continuous Deployment
• Continuous Integration

Recruitment stages

• Send your CV
• Talk to us about your expectations
• Learn more about our projects and choose the best
• Start your adventure with Sii!

Sii Sp. z o.o.

Sii is the leading technology consulting, digital transformation, engineering, and business services vendor in Poland. We already employ more than 7 300 professionals and implement projects in a variety of industries for clients from many countries around the world. The Great Place to Work title, won 10 times in a row, proves that at Sii, we create a friendly work environment.

Sii ensures that all employment-related decisions are made solely on the basis of qualifications and competencies. We are committed to equal treatment of all individuals, regardless of any protected characteristics, and promoting a diverse and inclusive work environment.