Software Supply Chain Engineer (f/m/x)

Sii Polska is hiring an experienced Software Supply Chain Engineer for their InnerSource & Open Source Office (ISOSO) team. The role focuses on ensuring compliance with open source software usage in commercial products and contributing to regulatory compliance, including FDA requirements. The position supports collaboration with architects, developers, and cross-functional teams, and is open for remote work with residence required in Poland.

• Minimum 5 years of experience in software development focusing on open source compliance
• Bachelor's degree in Computer Science, Software Engineering, or related field
• Proven experience with CI/CD pipelines and integrating open-source compliance checks
• Thorough understanding of open source licenses and compliance best practices
• Experience with CycloneDX or similar SBOM formats
• Proficiency managing dependencies across multiple programming languages including .NET/C#, Python, Java, C/C++, Node.js/TypeScript
• Familiarity with Linux and Windows operating systems and their interaction with open-source components
• Fluent in English and Polish
• Residence in Poland

Nice to have:

• Experience in regulated industries such as healthcare or medical devices
• Knowledge of container and virtual machine technologies
• Deep familiarity with Golang and the Syft codebase

• Collaborate with software architects and senior developers to generate comprehensive Software Bills of Materials (SBOM) for commercial products detailing open-source components and dependencies
• Review and analyze open source software usage to ensure compliance with relevant regulations and licenses, considering deployment and architecture implications
• Integrate open-source compliance checks into CI/CD pipelines to identify compliance issues early and minimize risks
• Manage dependencies for multiple programming languages such as .NET/C#, Python, Java, C/C++, and Node.js/TypeScript considering proprietary and open-source components
• Create and maintain compliance documentation including policies and best practices
• Utilize expertise in CycloneDX to enhance compliance processes
• Stay informed about industry regulations, particularly FDA requirements
• Provide training and support to development teams on open source compliance practices
• Drive upstream contributions to Syft in Golang to improve artifact analysis and supply chain security

Residence in Poland is required for this position.