Platform Engineer - Artifact Management & DevSecOps - London(Onsite)

Job Description

Platform Engineer - Artifact Management & DevSecOps

Location: London, UK
Working Model: 5 days onsite (mandatory)
Contract Type: Contract
Duration:6 months rolling

INSIDE IR35

We are looking for an experienced Platform Engineer with strong expertise in Artifact Management, CI/CD and Software Supply Chain Security for an exciting contract opportunity based in London.

The ideal candidate will have hands-on experience administering enterprise artifact repositories, securing software delivery pipelines and implementing DevSecOps best practices.

Key Responsibilities

• Manage and administer JFrog Artifactory and/or Sonatype Nexus repositories.
• Configure repository access controls, permissions, retention policies and artifact life cycle management.
• Implement secure artifact promotion, traceability and vulnerability scanning.
• Integrate artifact management platforms into CI/CD pipelines.
• Implement Software Composition Analysis (SCA), SBOM generation and artifact signing.
• Automate infrastructure and platform operations using Terraform, Ansible and Scripting.
• Collaborate with development, security and infrastructure teams to improve software supply chain security.

Essential Skills

• Strong hands-on experience with JFrog Artifactory or Sonatype Nexus.
• CI/CD: Jenkins, GitLab CI or GitHub Actions.
• Containers: Docker, Kubernetes and Helm.
• Infrastructure as Code: Terraform and Ansible.
• Security tools: JFrog Xray, Sonatype IQ, Snyk, Trivy or similar.
• Knowledge of SBOM, artifact signing, vulnerability management and software supply chain security.
• Scripting experience with Python, Bash or Go.
• Experience working in enterprise cloud environments