JFrog Artifactory & Xray Engineer

JFrog Artifactory & Xray Engineer
Hybrid - Mix of Onsite in London and Work From Home
6 Month Contract + Ongoing Extensions
£635.63 p/d Umbrella Rate

Are you the person development teams come to when something goes wrong in Artifactory? If you know the JFrog platform inside out and enjoy making build pipelines secure by default, this one's for you.

You'll join the Build and Deployment team within Platform Engineering at one of the world's largest financial groups. It's a hands-on team of around eight engineers that runs the build, packaging and deployment toolchain for the bank's engineering functions. There are two contract positions, bringing in JFrog and secure pipeline expertise the team needs now.

Your main focus will be the JFrog platform: Artifactory and Xray, how they sit within CI/CD, and extending their integration with ServiceNow so every application meets the bank's security rules. You'll also support the wider team's build and deployment work, including an ongoing migration to Octopus Deploy.

What You'll Be Doing

• Maintaining, supporting and improving JFrog Artifactory and Xray as part of the bank's CI/CD pipelines
• Managing repositories and package life cycles across .NET (NuGet), Maven and Python ecosystems
• Owning Xray policies and SBOM generation, so security findings and controls are enforced consistently
• Extending the integration between JFrog and ServiceNow, so findings flow into change and vulnerability processes
• Making sure every application follows the right security rules in the pipeline - scanning, approved sources and remediation with development teams
• Working directly with developers to onboard applications, troubleshoot build and dependency issues, and fix problems
• Untangling and debugging Legacy implementations, as well as rolling out new ones
• Supporting wider build and deployment work across GitHub Enterprise, GitHub Actions and TeamCity, and the migration to Octopus Deploy

What You'll Bring

• Strong, recent, hands-on experience administering JFrog Artifactory and Xray in a CI/CD environment - this is essential, and we'll be looking for real examples rather than a list of tools
• Experience with binary repository and package management for at least one of .NET/NuGet, Maven or Python, ideally more
• GitHub and GitHub Actions experience (TeamCity is used too, but Jenkins or similar is fine - it can be picked up)
• A solid understanding of CI/CD, Git and how secure pipelines fit together
• Scripting ability, ideally Python and/or PowerShell
• A practical approach: comfortable working with developers, debugging real problems and getting things implemented
• Experience in a regulated environment such as financial services

Desirable: ServiceNow integration, Octopus Deploy, JFrog Curation, GitHub Advanced Security, SBOM and software supply chain controls, some C# or .NET coding.

Please note: this is an engineering role, not a cyber security role. If your background is mainly vulnerability management, threat detection, SOC or penetration testing, this won't be the right fit.

Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate £1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd acts as an Employment Business in relation to this vacancy.