Supply Chain Risk & Trade Compliance Specialist

Job Req ID: 30370

About the role

Supermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.

Supermicro is seeking a Supply Chain Risk & Trade Compliance Specialist to establish and operate a dedicated Federal Supply Chain Risk Management (SCRM) and trade compliance program for SMCI Federal. Reporting to the Director of Federal Compliance, this role bridges federal supply chain security, export controls, and vendor risk governance. This position operates as a dedicated federal resource distinct from, but closely coordinated with, existing commercial Global Trade Compliance (GTC) operations. You will own bill-of-materials tracking (HBOM/SBOM), supplier risk scoring across security and non-security domains, restricted-vendor screening (e.g., NDAA Section 889/1260H), export classifications (ITAR/EAR), and country-of-origin verification required to secure government and defense sales pipelines.

Responsibilities

• Build, operate, and maintain a dedicated SCRM program for federal-bound products, including complete Hardware Bill of Materials (HBOM) and Software Bill of Materials (SBOM) tracking across active federal server and storage platforms.
• Develop and maintain a vendor criticality tiering model and a composite risk-scoring methodology spanning security posture, component/supply chain integrity, trade compliance, financial viability, and geopolitical/concentration risk — driving differentiated assessment depth and reassessment cadence by tier.
• Conduct third-party supply chain risk assessments, including supplier cybersecurity posture evaluations, counterfeit parts prevention reviews, restricted-vendor screening (NDAA Section 889/1260H / Entity List),