Platform Engineer - Artifact Management & DevSecOps - London(Onsite)

Platform Engineer - Artifact Management & DevSecOps

Location: London, UK
Working Model: 5 days onsite (mandatory)
Contract Type: Contract
Duration: 6 months rolling

INSIDE IR35

We are looking for an experienced Platform Engineer with strong expertise in Artifact Management, CI/CD and Software Supply Chain Security for an exciting contract opportunity based in London.

The ideal candidate will have hands-on experience administering enterprise artifact repositories, securing software delivery pipelines and implementing DevSecOps best practices.

Key Responsibilities

• Manage and administer JFrog Artifactory and/or Sonatype Nexus repositories.

• Configure repository access controls, permissions, retention policies and artifact life cycle management.

• Implement secure artifact promotion, traceability and vulnerability scanning.

• Integrate artifact management platforms into CI/CD pipelines.

• Implement Software Composition Analysis (SCA), SBOM generation and artifact signing.

• Automate infrastructure and platform operations using Terraform, Ansible and Scripting.

• Collaborate with development, security and infrastructure teams to improve software supply chain security.

Essential Skills

• Strong hands-on experience with JFrog Artifactory or Sonatype Nexus.

• CI/CD: Jenkins, GitLab CI or GitHub Actions.

• Containers: Docker, Kubernetes and Helm.

• Infrastructure as Code: Terraform and Ansible.

• Security tools: JFrog Xray, Sonatype IQ, Snyk, Trivy or similar.

• Knowledge of SBOM, artifact signing, vulnerability management and software supply chain security.

• Scripting experience with Python, Bash or Go.

• Experience working in enterprise cloud environments