Sonatype

DevOps Engineer

Posted 9 Days Ago

Be an Early Applicant

Hiring Remotely in Colombia

Remote

Mid level

Software • Cybersecurity

Sonatype is the software supply chain management company.

The Role

The DevOps Engineer will drive service delivery excellence, utilizing automation, cloud services, and modern CI/CD practices while collaborating with delivery teams on system analysis and observability.

Summary Generated by Built In

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.

As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.

More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.

We are looking for team members that want to help us change the way the world innovates through software. The Sonatype team has already done this through its contributions to the Maven build system, the Nexus Repository Manager and Nexus Lifecycle, and most recently with Sonatype SBOM manager – literally changing the way the world creates and delivers software across thousands of organizations and millions of developers.

That was just the beginning. We need your help so that we can do it again. If you are interested in delivering value across nearly every decision made in the world of software development, to help companies create better and safer software faster, to transform innovation through software, read on.

Who you are and what you'll do

You are an engineer who has 4+ years of experience running high availability systems and supporting infrastructure in customer-facing production environments.
You are motivated by the opportunity to define repeatable practices for service delivery- via modular, reusable automation and a developer platform that enables self-service delivery of services. You will also participate in the governance controls that reduce risk and promote standardization across the organization.
You will be a member of the Sonatype Developer Experience team, which has a wide range of responsibilities to drive service delivery excellence for Sonatype products and services that are customer-facing and customer-adjacent.
You will refine a set of high level enablement practices - for instance, design review, service launch coordination, production readiness assessment, service level objective definition / review, incident management, and cost awareness- to support delivery teams at various phases of their service lifecycle and maturity.
You will collaborate closely with Sonatype delivery teams to define product specific metrics and remediations through system analysis, testing, and fault troubleshooting.

What you need

Proficiency with a high-level programming language (eg: Python, Go), bash scripting and linux
Proficiency in modern technical operating practices
System architecture & design experience
Continuous integration / continuous delivery (Jenkins, FluxCD and GitHub Actions)
Infrastructure as Code (Terraform)
Cloud services (AWS) and Kubernetes
SRE principles & practices
Experience with specific AWS offerings, including many of:
ECS/EKS/ECR
EC2, S3, RDS, VPCs
IAM Policy Docs, Policies, Roles, and Instance Profiles
Cloudwatch Logs
Docker Containers and orchestration (ECS, EKS)
Terraform and the use of Terraform modules
Kubernetes cluster concepts and design
Experience improving service observability: monitoring agents, metrics, logging and dashboards. Knowledge of OpenTelemetry and Prometheus and observability platforms similar to DataDog, Splunk, Dynatrace or Observe
Comfortable participating in an on-call rotation with teammates to respond and triage production issue escalations during off-hours

Things we're proud of

2025 AI Compliance Solution of the Year - AI Breakthrough Awards
2025 DEVIES Award to our SBOM Manager new product for its innovation and impact in developer technology
2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
2023 Fast Company Best Places for Innovators
2023 Gartner's Magic Quadrant
2023 Software Report's Top 100 Software Companies
2023 BuiltIn Best Places to Work
2022 Frost & Sullivan Technology Innovation Leader Award
2022 PeerSpot Silver Peer Award in Software Composition Analysis
2022 Tech Ascension Best DevOps Security Solution Award
2022 NVCT Cyber Company of the Year
Company Wellness Week - We shut down company operations for a week to enable all employees to pursue personal growth and enjoy a much-needed and deserved rest.
Paid Volunteer Time Off (VTO)

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.

Top Skills

AWS

Bash

Datadog

Docker

Dynatrace

Fluxcd

Github Actions

Jenkins

Kubernetes

Linux

Opentelemetry

Prometheus

Python

Splunk

Terraform

View all jobs at Sonatype

View Sonatype Profile

Report Job

Am I A Good Fit?

beta

Get Personalized Job Insights.

Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company

HQ: Fulton, MD

600 Employees

Year Founded: 2008

What We Do

The Sonatype journey started almost 15 years ago, just as the concept of “open source” software development was gaining steam. From our humble beginning as core contributors to Apache Maven, to supporting the world’s largest repository of open source components (Central), to distributing the world's most popular repository manager (Nexus), we’ve played a meaningful role in helping the world embrace the power of open innovation.

We empower developers and security professionals with intelligent tools to innovate more securely at scale. Our platform addresses every element of an organization’s entire software development life cycle, including third-party open source code, first-party source code, and containerized code. Sonatype identifies critical security vulnerabilities and code quality issues and reports results directly to developers when they can most effectively fix them. This helps organizations develop consistently high-quality, secure software which fully meets their business needs and those of their end-customers and partners. More than 2,000 organizations, including 70% of the Fortune 100, and 15 million software developers rely on our tools and guidance to help them deliver and maintain exceptional and secure software.

Why Work With Us

We're on a mission to change how the world innovates by making software development easier. Already used by 15 million developers, we have lofty goals for our technology to be in the hands of every engineering team. And, we need you to do that. Join us!