New Era Technology
At a Glance
Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we're committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale.
At New Era, you'll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service.
If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together
SecureBlu by New Era Technology is looking for a hands-on DevSecOps Architect specializing in Software Supply Chain Security to help secure software build and release pipelines for our client, Commvault.
The ideal candidate will have strong experience securing CI/CD pipelines, managing Software Bills of Materials (SBOMs), implementing artifact signing and provenance verification, and securing Kubernetes environments. This role focuses on hands-on implementation of security controls across the software development lifecycle.
Design and implement software supply chain security controls across build and release pipelines.
Secure GitHub and GitLab environments, including branch protection, signed commits, access controls, and provenance attestation.
Implement SBOM generation, validation, and distribution using Syft, CycloneDX, or SPDX.
Integrate dependency scanning and vulnerability management into CI/CD pipelines.
Implement artifact signing and verification using Sigstore, Cosign, or in-toto.
Develop and enforce security-as-code and policy-as-code controls using tools such as Open Policy Agent (OPA), Kyverno, or Conftest.
Secure Kubernetes-based build and deployment environments.
Conduct threat modeling for CI/CD pipelines, infrastructure, and AI-assisted development workflows.
Assess risks associated with open-source dependencies, AI-generated code, and AI coding assistants.
Align security practices with SLSA, NIST SSDF, and NIST SP 800-218.
Develop security documentation, reference architectures, runbooks, and audit evidence.
Collaborate with security, engineering, platform, and compliance teams.
5–8 years of experience in DevSecOps, application security, or platform engineering, with direct ownership of CI/CD security.
Strong hands-on experience with GitHub Actions, GitLab pipelines, and enterprise-scale repository administration.
Experience generating and managing SBOMs using SPDX or CycloneDX.
Knowledge of SLSA, NIST SSDF, and NIST SP 800-218.
Experience with artifact signing, provenance, and verification tools such as Sigstore, Cosign, or in-toto.
Hands-on Kubernetes security experience, including admission control, network policies, and workload hardening.
Experience with policy-as-code tools such as OPA, Kyverno, or Conftest.
Understanding of threat modeling methodologies such as STRIDE or attack trees.
Scripting proficiency in Python, Bash, or Go.
Familiarity with Docker, OCI images, container registries, and container security.
Experience with cloud platforms such as AWS, Azure, or Google Cloud.
Familiarity with vulnerability management tools such as Snyk or Dependency-Track.
Experience working in enterprise or regulated software environments.
Previous consulting or contract experience supporting distributed engineering teams.
Remote position.
Regular overlap with US business hours is required for cross-team collaboration.
No routine travel is identified.
Education: Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
Interested candidates are encouraged to apply with their updated resume.
New Era Technology, LLC., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”).
View our Privacy Policy here https://www.neweratech.com/us/privacy-policy/
We never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at privacy@neweratech.com .
Source: New Era Technology careers · View original posting
New Era Technology is a global managed technology service provider based in New York, serving over 20,000 customers across various industries since its founding in 2013. With a workforce of approximately 4,500 employees in over 80 locations worldwide, the company focuses on being a trusted technology advisor, emphasizing community, integrity, agility, and commitment. The company offers a wide range of technology solutions, including collaboration and unified communications, data networking, cloud solutions, cybersecurity, digital transformation services, physical security, managed services, and professional services. New Era Technology also develops proprietary products, such as Able+, an identity and access management solution, and provides tailored education technology solutions. They serve diverse sectors, including healthcare, education, government, and finance, and work with both government and private enterprises, including Fortune 500 companies. Their customer service team is dedicated to maintaining strong relationships and ensuring a positive customer experience.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“New Era Technology's security philosophy emphasizes that 'Security can't be bolted on after the fact,' suggesting a focus on integrated protection. Their risk philosophy involves treating 'identity, devices, cloud, and physical security as one connected system.' Verbatim details regarding developer enablement versus gatekeeping or specific AppSec-level mission statements are not publicly available.”
Security Team
New Era Technology's security leadership includes Kevin Scott, Director of Security Architecture & Engineering. While the company reports having '120+ Engineers & Technicians' globally, specific details regarding the Application Security team's organizational structure, reporting lines, or dedicated headcount are not publicly available. No active AppSec-specific job postings were identified as of May 2026.
Key Initiatives
There is no public evidence of a Security Champions program, specific 'Shift Left' practices, or a documented Secure SDLC process at New Era Technology. Operational details regarding vulnerability management (intake, triage, or SLAs) and recent AppSec-specific initiatives from the last six months are not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on New Era Technology's site