Platform Engineer - Artifact Management & DevSecOps - London(Onsite)

Job Description \n Platform Engineer - Artifact Management & DevSecOps \n Location: London, UK Working Model: 5 days onsite (mandatory) Contract Type: Contract Duration: 6 months rolling \n INSIDE IR35 \n We are looking for an experienced Platform Engineer with strong expertise in Artifact Management, CI/CD and Software Supply Chain Security for an exciting contract opportunity based in London. \n The ideal candidate will have hands-on experience administering enterprise artifact repositories, securing software delivery pipelines and implementing DevSecOps best practices. \n Key Responsibilities \n \n \n Manage and administer JFrog Artifactory and/or Sonatype Nexus repositories. \n \n Configure repository access controls, permissions, retention policies and artifact life cycle management. \n \n Implement secure artifact promotion, traceability and vulnerability scanning. \n \n Integrate artifact management platforms into CI/CD pipelines. \n \n Implement Software Composition Analysis (SCA), SBOM generation and artifact signing. \n \n Automate infrastructure and platform operations using Terraform, Ansible and Scripting. \n \n Collaborate with development, security and infrastructure teams to improve software supply chain security. \n \n Essential Skills \n \n \n Strong hands-on experience with JFrog Artifactory or Sonatype Nexus . \n \n CI/CD: Jenkins, GitLab CI or GitHub Actions. \n \n Containers: Docker, Kubernetes and Helm. \n \n Infrastructure as Code: Terraform and Ansible. \n \n Security tools: JFrog Xray, Sonatype IQ, Snyk, Trivy or similar. \n \n Knowledge of SBOM, artifact signing, vulnerability management and software supply chain security . \n \n Scripting experience with Python, Bash or Go. \n \n Experience working in enterprise cloud environments \n