Open Source Software Compliance Engineer

Overview

A renowned global wireless technology pioneer is seeking an Open Source Software Compliance Engineer for an 18-month contract based in Cork with hybrid work arrangements. The role is centered on ensuring that products and services fully comply with open source licensing requirements and align with industry best practices.

Key Duties

• Carry out compliance assessments related to Free and Open Source Software (FOSS) across various business units and product lines, including source code and binary analysis.
• Evaluate open source software licenses to determine their impact on commercial distribution.
• Maintain detailed records of software components, licenses, obligations, and attributions ensuring all elements—from source code to third-party binaries and containers—are traceable.
• Manage and integrate Software Composition Analysis (SCA) tools, preferably FossID, into development pipelines.
• Develop automated processes using Python to streamline compliance activities such as scanning, generating and validating software bills of materials (SBOMs), approvals, compliance reporting, and readiness verification before releases.
• Implement SBOM standards like SPDX and CycloneDX throughout the product lifecycle including publication, validation, and version control for software releases.
• Conduct risk evaluations regarding licensing, security, and origin of open source components and recommend appropriate remediation actions such as substitution or configuration adjustments.
• Educate development teams about correct management of OSS intake, dependency connections, proper attribution, notice files, and license adherence patterns.
• Keep up with evolving license requirements, industry regulations, and community best practices to continually refine company policies and procedures.
• Assist in compliance reviews, audits, governance processes, prerelease validation checkpoints, partner disclosures, and internal or external audits.

Qualifications and Skills

• Proven expertise in open source compliance analysis, reporting, and publication.
• Experience with SCA tools such as FossID, Blackduck, or other equivalents.
• Knowledge of SBOM standards including SPDX and CycloneDX and related validation methods.
• Familiarity with the OpenChain standard and its practical application.
• Ability to interpret source code in languages including C/C++, Java, Python, and Go.
• Proficient in automating compliance reporting integrated within CI/CD workflows.
• Meticulous attention to detail with a commitment to high-quality deliverables.
• Capable of working independently, initiating improvements, adhering to timelines, and possessing strong written communication skills.
• Preference for experience with Linux operating systems.
• Educational background: Bachelor’s degree in Computer Engineering or related field is mandatory; Master’s degree preferred.

Remuneration and Contract Details

This is a daily rate contract position with compensation ranging from 300 to 400 per day, commensurate with experience.