Senior Release Engineer

<div class="content-intro"><p>Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.</p></div><div class="ewa-rteLine"><strong>Sr. Release Engineer</strong> - Build &amp; Supply Chain Security</div> <div class="ewa-rteLine">&nbsp;</div> <div class="ewa-rteLine">We are looking for a Release Engineer/ Sr Release Engineer to join our Build &amp; Deployment Engineering team. As a member of the release engineering team you will have an opportunity to develop tools to automate processes, develop re-usable libraries and build and release pipelines that use them. We are embracing cutting edge technology as we go, so that we can continue to increase velocity. The ideal candidate will be a great communicator and a quality focused innovator. You need to be willing to experiment and to learn quickly so we can leverage new technology as it becomes available.</div> <div class="ewa-rteLine">&nbsp;</div> <div class="ewa-rteLine"><strong>Responsibilities of this Role:</strong></div> <div class="ewa-rteLine">Analyze and Tune build and Unit Test Pipelines across multiple platforms and technology stacks</div> <div class="ewa-rteLine">Maintain and Deploy Continuous Integration/Continuous Delivery Pipelines using GitLab CI, docker and python libraries, using Jenkins Pipelines with Groovy Libraries</div> <div class="ewa-rteLine">supporting GitHub Actions and other CI/CD platforms</div> <div class="ewa-rteLine">Automate branching, tagging, and SCM administration for multiple projects across various VCS platforms</div> <div class="ewa-rteLine">Maintain, Evolve and Create Automation Infrastructure</div> <div class="ewa-rteLine">Identify processes that can be automated and create tools or scripts</div> <div class="ewa-rteLine">Develop and maintain reusable build libraries and frameworks</div> <div class="ewa-rteLine">Provide consistent and reliable build environments across Windows, Linux, and macOS</div> <div class="ewa-rteLine">Implement and manage Software Supply Chain Security</div> <div class="ewa-rteLine">Deploy, Admin and Manage Software Composition Analysis (SCA) and vulnerability scanning tools</div> <div class="ewa-rteLine">Implement secure build practices and artifact management</div> <div class="ewa-rteLine">Monitor and report on supply chain security posture</div> <div class="ewa-rteLine">Deploy, Admin and Manage SAST, DAST scans and security tools (Black Duck, Coverity, Code Dx and other security analysis tools)</div> <div class="ewa-rteLine">Manage containerized application deployments using Docker, Kubernetes, and related orchestration tools</div> <div class="ewa-rteLine">Automate infrastructure provisioning and deployment using Ansible, Terraform, and cloud provider tools</div> <div class="ewa-rteLine">Manage Release of VM Images/Virtual Applications into the Amazon and Google Cloud Marketplaces</div> <div class="ewa-rteLine">Troubleshoot build failures and infrastructure issues, providing timely resolution and documentation</div> <div class="ewa-rteLine">Monitor build system performance and implement optimizations to reduce build times and failures</div> <div class="ewa-rteLine">&nbsp;</div> <div class="ewa-rteLine"><strong>Key Qualifications:</strong></div> <div class="ewa-rteLine">5+ years of Bash Shell Scripting</div> <div class="ewa-rteLine">Build Pipelines with CI/CD automation in Jenkins, Gitlab, Github, Concourse, or equivalent platforms</div> <div class="ewa-rteLine">Python programming and package creation</div> <div class="ewa-rteLine">OOP design and implementation</div> <div class="ewa-rteLine">Docker image creation, tagging and releases</div> <div class="ewa-rteLine">Git and Gitlab CI or equivalent version control and CI systems</div> <div class="ewa-rteLine">Experience with build tools: Gradle, Maven, NodeJS, Ant, or equivalent</div> <div class="ewa-rteLine">Multi-platform build system experience (Windows, Linux, macOS)</div> <div class="ewa-rteLine">Experience with software supply chain security and vulnerability management</div> <div class="ewa-rteLine">Linux System Administration and shell scripting proficiency</div> <div class="ewa-rteLine">Strong troubleshooting and problem-solving skills</div> <div class="ewa-rteLine">Excellent documentation and communication skills</div> <div class="ewa-rteLine">&nbsp;</div> <div class="ewa-rteLine"><strong>Preferred Experience</strong></div> <div class="ewa-rteLine">Kubernetes, Helm, Terraform, Ansible</div> <div class="ewa-rteLine">AWS / GCP / Azure cloud automation and infrastructure management</div> <div class="ewa-rteLine">DevOps Automation and Infrastructure as Code practices</div> <div class="ewa-rteLine">Linux System Administration and VM Management via OpenStack or equivalent</div> <div class="ewa-rteLine">Dev Sec Ops and CI Supply Chain Security frameworks (SLSA, SBOM)</div> <div class="ewa-rteLine">Software Composition Analysis (SCA) tools and vulnerability scanning platforms</div> <div class="ewa-rteLine">MacOS signing and Notarization processes</div> <div class="ewa-rteLine">Windows Binary Signing and certificate management</div> <div class="ewa-rteLine">Experience with multiple build systems and their integration</div><div class="content-pay-transparency"><div class="pay-input"><div class="title">Pay Range</div><div class="pay-range"><span>$101,300</span><span class="divider">&mdash;</span><span>$152,000 USD</span></div></div></div><div class="content-conclusion"><p>Black Duck considers all applicants for employment without regard to race, color, religion, sex, gender preference, national origin, age, disability, or status as a Covered Veteran in accordance with federal law. In addition, Black Duck complies with applicable state and local laws prohibiting discrimination in employment in every jurisdiction in which it maintains facilities. Black Duck also provides reasonable accommodation to individuals with a disability in accordance with applicable laws.</p></div>