Senior Engineering Manager for Open Source

About Lineaje

Lineaje is at the forefront of providing robust security management solutions for software supply chains. Our innovative technology offers a comprehensive mapping of software components, revealing dependencies and authenticating the entire chain to prevent security compromises. By ensuring the integrity and security of software supply chains, we empower businesses to operate safely and efficiently in a digital world. Join us in our mission to enhance software security and drive technological advancements in the industry.

Position Summary:

We are seeking a highly skilled and motivated Senior Engineering Manager for Open Source to lead our team of engineers in developing and managing open source projects focused on reducing risks in the software supply chain for our customers. The ideal candidate will have a strong background in cybersecurity, software supply chain risk management, and experience in cloud-native architecture. You will work closely with cross-functional teams to ensure the delivery of scalable, efficient, and secure solutions that meet both commercial and Federal requirements, including FedRAMP authorization.

Key Responsibilities:

1. Team Leadership:

• Lead, mentor, and manage a team of engineers working on open source projects.
• Foster a collaborative and inclusive team environment that encourages innovation and continuous learning.
• Develop strategies for building and retaining a high-performing team, including attracting and retaining top talent in the industry.
• Set clear goals and expectations for the team, conducting regular performance evaluations.

1. Project Management:

• Oversee the planning, execution, and delivery of open source projects, ensuring alignment with organizational goals and customer needs.
• Manage a high volume of open source projects concurrently, ensuring all projects are delivered on time and with high quality, even under tight schedules.
• Demonstrate the ability to work under pressure and maintain performance standards while working flexible hours to meet project demands.
• Collaborate with product management, security, and other stakeholders to define project requirements and success criteria.
• Utilize collaboration tools such as Jira and Slack for effective project management and communication.
• Apply agile development methodologies, such as Scrum or Kanban, to ensure the team works efficiently and effectively.

1. Contractor Management:

• Identify the need for contractor involvement and lead the hiring process for external contractors.
• Review Statements of Work (SOWs) and define clear exit criteria for delivered projects, ensuring quality and timely completion.
• Manage relationships with contractors, providing guidance and oversight to ensure alignment with project objectives and company standards.

1. Technical Expertise:

• Drive the adoption of best practices in cybersecurity and software supply chain risk management within the team.
• Provide expertise in vulnerability management, threat intelligence, and compliance with security standards like NIST and FedRAMP.
• Guide the team in the application of cloud-native architecture and design patterns to build scalable systems.
• Lead initiatives to integrate solutions in Federal environments, ensuring compliance with FedRAMP and other regulatory standards.
• Collaborate effectively with security teams to integrate solutions with existing security systems.
• Emphasize cloud security expertise, including experience with cloud security controls and compliance with cloud security standards.

1. Open Source Contributions:

• Encourage and facilitate team contributions to open source projects, promoting a culture of community engagement.
• Build relationships with open source communities and contribute to projects, enhancing the team's visibility and reputation in the industry.
• Identify, assess, and mitigate risks in open source software used by customers.
• Stay updated with the latest trends and advancements in open source software, cybersecurity, and supply chain risk management.

1. Technical Skills and Tools:

• Ensure the team effectively uses containerization technologies like Docker and Kubernetes for deployment and management.
• Promote the adoption of DevOps practices and tools to ensure smooth integration and continuous delivery of systems.
• Oversee the use of version control systems such as Git to manage codebases and track changes.
• Emphasize experience with continuous integration and delivery pipelines, including tools like GitLab.

1. Collaboration and Communication:

• Build strong relationships with internal teams and external partners to facilitate collaboration and knowledge sharing.
• Communicate project status, risks, and opportunities to senior leadership and stakeholders.
• Represent the organization at industry conferences and events to promote open source contributions and initiatives.
• Demonstrate strong presentation and public speaking skills to effectively present project updates, risks, and opportunities.
• Utilize technical writing and documentation skills to ensure the team's work is well-documented and easily accessible.
• Exhibit effective communication and collaboration skills to work with cross-functional teams, including security, product management, and engineering.

1. Industry Connections and Continuous Learning:

• Develop and maintain industry connections and partnerships to stay current with emerging trends and technologies in open source software, cybersecurity, and supply chain risk management.
• Emphasize the need for ongoing learning and professional development to stay current with rapidly evolving technologies and trends in open source software and cybersecurity.

Qualifications:

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field.
• 10+ years of experience in software engineering, with at least 5 years in a leadership role managing teams.
• Strong domain expertise in cybersecurity and software supply chain risk management.
• Specific experience in contributing to or maintaining open source projects, particularly in the cybersecurity and software supply chain risk management domains.
• Experience with cloud-native architecture, including AWS, MongoDB, OpenSearch, EKS, and Fargate.
• Proven track record of building and deploying solutions in a Federal environment, with knowledge of FedRAMP requirements.
• Proficiency in containerization technologies such as Docker and Kubernetes.
• Familiarity with DevOps practices and tools, and experience with continuous integration and delivery pipelines.
• Excellent collaboration and communication skills, with experience using tools like Jira and Slack.
• Strong understanding of version control systems, particularly Git.
• Passion for open source software and community engagement.
• Strong analytical and problem-solving skills to identify, assess, and mitigate risks in open source software.
• Industry recognition and reputation, particularly in the open source community, to ensure the team's work is well-respected and widely adopted.
• Customer-facing experience, particularly in the Federal sector, to ensure the team can effectively communicate with customers and meet their needs.
• Certifications and training in relevant technologies or methodologies, such as AWS Certified Solutions Architect or Certified Kubernetes Administrator.
• Industry certifications in cybersecurity, such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).