Does anyone know good sources for creating a SBOM?
2,074 karma · joined December 14, 2016
I also like to surf and do analog photography.
Does anyone know good sources for creating a SBOM?
We're a consultancy in the GCP and AWS space. We also have some nascent products in the cloud cybersecurity space that are being built and already used by some.
We're looking for freelance or FTE work in the following spaces:
- NextJS: We have a NextJS FE and are looking for an experienced NextJS engineer. You should be fluent in TypeScript, react, and more complex issues that a NextJS app faces, such as context, authentication, and state across pages and apps. TailwindCSS is a plus.
- Golang: Our product uses golang. We're looking for someone with extensive experience building, and shipping, golang apps that are complex. We use PG in the background, so SQL experience is a plus.
- Cloud Infra engineers: In the AWS & GCP space are always needed. You should have experience working with production EKS or GKE workloads. Terraform expertise is a necessity here, unfortunately a lot of beginners apply and we can spot them pretty fast.
About us: We're a worldwide remote cloud infra consultancy with a product in the cloud compliance space. We work with American customers primarily, so we all have excellent written and english communication. You can generally work hours that you see fit, outside of necessary meetings.
stephen at staropshq dot com
Severance. We will pay 16 weeks of base pay plus two
additional weeks for every year of service, with no cap.
PTO. We’ll pay for all remaining PTO time.
RSU vesting. Everyone impacted will receive their November
15, 2022 vesting.
Health insurance. We’ll cover the cost of healthcare for
people and their families for six months.
Career services. We’ll provide three months of career
support with an external vendor, including early access to
unpublished job leads.
Immigration support. I know this is especially difficult
if you’re here on a visa. There’s a notice period before
termination and some visa grace periods, which means
everyone will have time to make plans and work through
their immigration status. We have dedicated immigration
specialists to help guide you based on what you and your
family need.Senior cloud infrastructure & devops engineer from a health tech startup background. I have a focus on healthcare & compliance as it relates to the cloud. I work primarily with k8s (EKS, GKE) using Terraform & Terragrunt, Atlantis, and more.
I work with startups and larger enterprises to move applications to the cloud, deploy to EKS, or move console based deployments to IAAC. I am especially knowledgeable with compliance, having helped my latest HC client on FedRAMP moderate certification.
Currently finishing a project with a Series A funded startup, where I worked on FedRAMP compliance and deployed a custom service mesh that touches ~70% of all US patient data.
I make difficult things easy and easy things automated, since I come from a startup background.
Skills: AWS | GCP | Terraform | Terragrunt | Linkerd | Envoy Proxy | EKS | Github Actions
Languages: TypeScript/Node | Golang | Python
Kubernetes: Everything under the sun regarding EKS & GKE, from custom service mesh solutions to automated complex workflows and environments.
Cloud: GCP/AWS, specifically container orchestration platforms and developing CI/CD pipelines for them (EKS,ECS, etc.)
AWS certified, if it mattersEmail: stephen at lizcano dot dev Website: lizcano dot dev
So ideally a portfolio site with some blog posts in your area of expertise. These are often very very beneficial.
In terms of finding work, firstly be sure to post every month in the hacker news freelancer/seeking freelancer threads! It's very helpful and how I got started.
Secondly, find larger consulting shops and cold emailing them asking if they have extra work. It's also worked for me.
Keep trying, don't give up, and it WILL come. Good luck.
I work with startups and larger corps to move applications to the cloud, deploy to kubernetes, or move console based deployments to IAAC.
Currently finishing a project with a Series A funded startup, taking their console-based AWS deployment to HIPAA compliant module-based IAAC Terraform with Terragrunt on EKS.
I make difficult things easy and easy things automated, since I come from a startup background.
Skills: AWS | GCP | Terraform | Terragrunt | Vault | EKS | GKE | Fargate | Docker | Atlantis |
Languages: TypeScript/Node | Go | Swift | Python
K8S: CKAD, AWS Load Balancer Controller, Nitty gritty IAM aspects,
Cloud: GCP/AWS, specifically container orchestration platforms and developing CI/CD pipelines for them (EKS,ECS, etc.). I also write CLIs in Go.
AWS certified, if it matters Email: stephen at lizcano dot dev Website: lizcano dot dev