Build & Deployment Manager – JFrog Artifactory – 11870CF

Proactive Appointments Ltd.; West of England; Vor Ort; GBP 111.000 - 117.000; Vollzeit

Zusammenfassung

Proactive Appointments Ltd. seeks a Build & Deployment Manager to own secure software delivery and supply-chain controls across a regulated tech environment. You will manage Artifactory/Xray, GitHub Enterprise, and CI/CD pipelines, embedding security across pipelines and enabling auditable release processes.

The role requires hands-on expertise in DevSecOps, scripting, and integration with ServiceNow, with strong collaboration across engineering and security teams. Onsite 4 days per week.

Qualifikationen

• Hands-on experience with DevSecOps, platform engineering or enterprise build/release engineering in regulated environments.
• Strong hands-on experience with JFrog Artifactory and Xray.
• Proven ability to design and support secure CI/CD pipelines.
• Deep knowledge of GitHub Enterprise and modern source-control practices.
• Understanding of artefact repositories, package managers, dependency management and provenance.

Aufgaben

• Administering and supporting JFrog Artifactory and Xray including repositories, permissions, promotions, build info, retention policies and scanning.
• Designing, implementing and supporting secure CI/CD pipelines across multiple tech stacks.
• Managing GitHub Enterprise including repos, branching, PRs, permissions, releases and tool integration.
• Embedding security controls (SAST, software composition analysis, SBOM generation, policy-based gates).
• Managing vulnerabilities from discovery to remediation and evidence-based closure.
• Integrating vulnerability and software asset information with ServiceNow for mapping and remediation tracking.
• Automating processes using PowerShell, Bash, Python or REST APIs and configuration-as-code.
• Supporting TeamCity, Octopus Deploy, GitHub Actions and Azure DevOps in build/deploy.
• Troubleshooting issues across SCM, pipelines, dependencies, agents and deployment platforms.
• Producing technical designs, reusable pipeline standards, SOPs and audit evidence.
• Working within change, incident, problem, release and vulnerability-management processes.

Kenntnisse

DevSecOps

Platform engineering

Build & release engineering

JFrog Artifactory

Xray

CI/CD pipelines

GitHub Enterprise

ServiceNow

Scripting & automation

PowerShell

Bash

Python

REST APIs

Windows build agents

Linux build agents

Tools

JFrog Artifactory

Xray

GitHub Enterprise

ServiceNow

TeamCity

Octopus Deploy

GitHub Actions

Azure DevOps

Jobbeschreibung

11870CF
£600 – 635 per day

Build & Deployment Manager – JFrog Artifactory

4 days onsite – Inside IR35

Our client, a leading global financial services organisation, is looking for an experienced Build & Deployment Manager to join its engineering function and take ownership of secure software delivery and supply-chain controls across a complex, regulated technology environment.

This is a hands-on engineering role, focused on building, administering and continuously improving enterprise DevSecOps capabilities. You’ll work across JFrog Artifactory and Xray, GitHub Enterprise, CI/CD platforms and ServiceNow, helping development teams build, secure, package, deploy and manage software through repeatable, auditable pipelines.

The Role

You’ll provide technical ownership of secure software supply-chain controls across the organisation. You’ll work closely with engineering, security and application teams to embed appropriate security controls into delivery pipelines without creating unnecessary friction.

Your responsibilities will include:

• Administering and supporting JFrog Artifactory and Xray, including repositories, permissions, package promotion, build information, retention policies and scanning.
• Designing, implementing and supporting secure CI/CD pipelines across multiple technology stacks.
• Managing GitHub Enterprise, including repositories, branching, pull requests, permissions, releases and integration with security/build tooling.
• Embedding security controls including SAST, software composition analysis, dependency and artefact scanning, secrets detection, SBOM generation and policy-based gates.
• Managing vulnerabilities from initial discovery and technical triage through ownership, prioritisation, remediation, validation and evidence-based closure.
• Integrating vulnerability and software asset information with ServiceNow, supporting accurate application/service mapping and remediation tracking.
• Automating processes using PowerShell, Bash, Python or equivalent, REST APIs and configuration-as-code.
• Supporting build and deployment technologies such as TeamCity, Octopus Deploy, GitHub Actions and Azure DevOps.
• Troubleshooting complex issues across source control, pipelines, dependencies, build agents, repositories, security tooling, deployment platforms and target environments.
• Producing technical designs, reusable pipeline standards, operating procedures, support documentation and audit evidence.
• Working within formal change, incident, problem, release and vulnerability‑management processes.

What We’re Looking For

We’re seeking an engineer with strong practical experience in DevSecOps, platform engineering or enterprise build and release engineering, ideally gained within a complex or regulated environment.

You should have:

• Strong hands‑on experience with JFrog Artifactory and Xray.
• Proven experience designing and supporting secure CI/CD pipelines.
• Strong knowledge of GitHub Enterprise and modern source‑control practices.
• A good understanding of artefact repositories, package managers, dependency management, immutable artefacts, provenance and controlled promotion.
• Practical knowledge of secure coding, OWASP, application vulnerabilities and remediation approaches.
• Experience managing vulnerabilities throughout their complete lifecycle.
• Experience integrating security/vulnerability tooling with ServiceNow, ideally Vulnerability Response or Application Vulnerability Response.
• Strong scripting and automation skills, alongside experience working with REST APIs and configuration-as-code.
• Working knowledge of Windows and Linux build agents, credentials, certificates, TLS, secrets management, logging and access controls.
• The ability to investigate and resolve complex technical issues across the software delivery lifecycle.

Experience with JFrog Advanced Security/Curation, GitHub Advanced Security, CodeQL, Dependabot, Terraform, Docker, Kubernetes, SBOMs, software signing/attestation or cloud-native platforms would be highly advantageous.

Knowledge of Java, .NET, JavaScript/TypeScript, Python or Go is useful, but this is not an application‑development role. We’re primarily interested in your ability to understand different development ecosystems and engineer secure, reliable delivery processes.

Build & Deployment Manager – JFrog Artifactory

Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation