3 of 3 SLSA Jobs in Northern Ireland

immutable blobs, mutable metadata, package identity, checksums, upstream proxying, private repos, access control, caching, and promotion.Provenance and trust mechanisms such as SBOMs, signing, attestations, SLSA, Sigstore, in-toto, trusted publishing, and zero-trust software delivery.Bonus PointsExperience securing artifact management, package registry, container registry, CI/CD, DevOps, developer tooling ...

blobs, mutable metadata, package identity, checksums, upstream proxying, private repos, access control, caching, and promotion. Provenance and trust mechanisms such as SBOMs, signing, attestations, SLSA, Sigstore, in-toto, trusted publishing, and zero-trust software delivery. Bonus PointsExperience securing artifact management, package registry, container registry, CI/CD, DevOps, developer tooling ...

accepting provenance and attestation payloads from CI/CD systems, public registries, signed bundles, and customer-uploaded artifacts across a wide range of formats (SLSA, in-toto, SBOM attestations, Sigstore bundles etc).Store: Own the storage architecture for signed provenance metadata.Validate: Build the validation engine that verifies cryptographic integrity … evaluates attestation data against configurable customer trust policies — SLSA level requirements, allowed builder identities, key material, and more.Expose: Deliver clean, well-documented APIs that make provenance data useful to customers and to other parts of the platform — queryable, auditable, and reliable.Collaborate: Work closely with product, customer success, and the wider ...