Principal R&D Engineer - Software Supply Chain Curation

Role Description

We are looking for a Principal R&D Engineer to provide technical direction for software supply-chain curation across a broad product portfolio. The role requires deep C and C++ engineering experience and practical knowledge of Perforce-based development, while using Python for automation and platform integration. The engineer will define architecture spanning Black Duck, JFrog, Jenkins, GitHub or Azure DevOps Server, policy evaluation, evidence, and reporting.

What Success Looks Like

The engineer establishes an architecture that covers C/C++ and Perforce-based products, scales across additional ecosystems, reduces duplicated review effort, and creates a sustainable technical direction that senior engineers can execute.

Key Qualifications

• Bachelor’s or master’s degree in computer science, software engineering, information security, or a related discipline, or equivalent practical experience.
• Strong hands-on software engineering experience in C and C++.
• Hands-on experience with Perforce in a production software-development environment.
• Experience with Python for automation, integration, services, or data-processing tasks.
• Experience with Jenkins and with at least one of GitHub or Azure DevOps Server.
• Experience using Black Duck and JFrog in SSDLC, software composition analysis, artifact management, or software supply-chain workflows.
• Ability to support products that use programming languages and build ecosystems beyond C, C++, and Python.
• Ability to communicate complex technical decisions clearly in English.
• Extensive experience architecting distributed or data-intensive enterprise platforms.
• Demonstrated ability to set direction across multiple teams and interconnected systems.
• Deep understanding of software supply-chain security, dependency risk, policy enforcement, and enterprise developer workflows.

Key Responsibilities

• Define the target architecture and technical roadmap for enterprise curation.
• Establish system boundaries, data contracts, policy interfaces, and integration patterns.
• Define scalable SSDLC integration patterns for Black Duck and JFrog.
• Set reference workflows for Perforce/Jenkins and compatible approaches for GitHub and Azure DevOps Server.
• Resolve ambiguous issues involving package identity, provenance, vulnerability correlation, licensing, and exceptions.
• Ensure architectural coverage across C, C++, Python, and other product ecosystems.
• Guide multiple workstreams, set engineering standards, and develop technical leaders.

Preferred Experience

• Experience with policy-as-code, rules engines, knowledge graphs, or metadata platforms.
• Experience defining enterprise reference architectures and migration strategies.