FOSS Compliance Engineer

FOSS Compliance Engineer

A leading technology company is looking for a FOSS Compliance Engineer to join its Open Source Engineering team and help ensure products and services meet open-source licensing obligations and industry best practices.

This is a hands-on role focused on FOSS compliance operations, software license analysis, SBOM management, SCA tooling, and compliance automation . You'll work closely with engineering and product teams to identify licensing risks, maintain accurate software inventories, and embed compliance into development and release workflows.

The successful candidate will combine strong knowledge of open-source licensing with practical technical skills, including Python automation, SCA tools, SBOM standards, and CI/CD integration .

Ideal candidates will have:

• Hands-on experience with FOSS compliance analysis, reporting, and publishing

• Strong understanding of OSS licenses and their implications for commercial software distribution

• Experience with Software Composition Analysis (SCA) tools such as FossID, Black Duck , or equivalent

• Experience maintaining software component, license, obligation, and attribution inventories

• Strong knowledge of SBOM standards , particularly SPDX and CycloneDX

• Experience generating, validating, versioning, and publishing SBOMs

• Familiarity with OpenChain standards and implementation

• Experience automating compliance workflows using Python

• Ability to integrate license scanning, SBOM generation, approvals, and compliance checks into CI/CD pipelines

• Ability to read and understand C/C++, Java, Python, and/or Go code

• Experience assessing OSS licensing, security, and provenance risks

• Ability to advise engineering teams on OSS intake, dependencies, attribution, notices, and compliant usage

• Experience supporting audits, governance processes, prerelease compliance gates, and customer disclosures

• Strong attention to detail, written communication, and independent problem-solving skills

• Experience working with Linux environments

Preferred Qualifications:

• Experience implementing or operating an enterprise-wide FOSS compliance program

• Experience integrating SCA tooling into software development workflows at scale

• Experience with OSS policy development and compliance automation

• Experience working with software supply-chain security and dependency management

• Master's degree in Computer Engineering or a related technical field

Key Words:

FOSS Compliance Engineer / Open Source Compliance Engineer / Open Source Engineer / FOSS Compliance / Open Source Software / OSS Licensing / Software Licensing / Software Composition Analysis / SCA / FossID / Black Duck / SBOM / SPDX / CycloneDX / OpenChain / License Compliance / License Analysis / OSS Risk / Software Supply Chain / Dependency Management / Python / CI/CD / DevSecOps / C++ / Java / Go / Linux / Compliance Automation / Software Governance / Software Audits / Open Source Governance / License Reporting / Software Inventory / Third-Party Software / Attribution / Notice Files

(By applying to this role you understand that we may collect your personal data and store and process it on our systems. For more information please see our Privacy Notice: Privacy Notice)