Job Description:
About the Role
EdgeVerve Systems is looking for a Senior Member – IP Management (FOSS Compliance) to be part of its central FOSS and IP governance function. The role is responsible for ensuring that all software products and platforms comply with open-source licensing obligations. The individual will work closely with engineering, DevOps, legal, and product teams to identify, assess, and mitigate open-source compliance risks across the organization.
This role requires strong hands-on experience in FOSS compliance operations, open-source license interpretation, and SCA tool usage, along with the ability to guide teams on best practices.
Key Responsibilities- Perform FOSS compliance analysis for software products, services, and platforms.
- Identify and analyze open-source licenses (GPL, LGPL, AGPL, MIT, Apache 2.0, BSD, etc.) and assess their impact on commercial software distribution.
- Maintain and govern an inventory of open-source components used across products.
- Use SCA tools (Black Duck Hub preferred; equivalent tools such as Mend, FOSSA, Snyk acceptable) to identify, track, and manage open-source components.
- Work with engineering and DevOps teams to integrate SCA scans into CI/CD pipelines.
- Support automation of FOSS compliance processes through scripting (primarily Python).
- Conduct open-source risk assessments and recommend remediation strategies.
- Provide guidance to development teams on open-source best practices and license compliance.
- Contribute to the development, implementation, and continuous improvement of FOSS compliance policies and processes.
- Collaborate closely with legal/IP teams for license interpretation, risk classification, and compliance decisions.
- Stay up to date with open-source licensing trends, regulations, and industry best practices.
- Support compliance reviews, audits, and release readiness activities as part of the central governance function.
Required Skills & Experience- Bachelor’s degree in computer science, Engineering, or a related discipline.
- Experience: Minimum relevant experience 2 years and 4 - 8 Years overall experience
- Strong working knowledge of:
- Open-source software principles and licensing models
- Application of open-source licenses in commercial software distributions
- Hands-on experience with Black Duck Hub (preferred) or equivalent SCA tools.
- Strong understanding of FOSS identification and dependency linking concepts.
- Experience working with engineering and DevOps teams to integrate compliance scans into pipelines.
- Ability to read and understand source code across languages such as C/C++, Java, and Python.
- Experience writing small automation scripts (Python) to streamline compliance workflows.
- Excellent analytical, problem-solving, and risk assessment skills.
- Strong communication skills with the ability to work across technical and legal stakeholders.
- Business English fluency (written and verbal).
- Experience with container image FOSS compliance and SBOM analysis.
- Familiarity with SBOM standards (SPDX, CycloneDX).
- Knowledge of industry frameworks and standards such as OpenChain.
- Exposure to legal and regulatory aspects of open-source software compliance.
- Experience supporting audits and governance activities in large engineering organizations.
- Familiarity with modern software development methodologies and DevOps practices.