Platform Engineer – Artifact Management And Software Supply Chain Security

Test Triangle; England; On-site; GBP 70,000 - 110,000; Full time

Job summary

Test Triangle Limited seeks a Platform Engineer to secure and operate enterprise artifact and open-source services. You will manage repositories, enforce governance, and integrate SBOMs and signing into CI/CD pipelines.

You will collaborate with security, architecture and risk teams to define secure controls, monitor platform health, and lead incident response in a cloud-native, Kubernetes-led environment.

Qualifications

• Experience operating enterprise artifact platforms and supply-chain security controls.
• Knowledge of repositories, CI/CD, open-source governance, SBOMs, signing and vulnerability management.
• Proficiency in Python or Go programming.
• Proficiency in Terraform, Helm or Ansible and automated security controls.
• Firsthand cloud-native and Kubernetes experience.

Responsibilities

• Engineer and operate enterprise repositories and registries for packages, binaries, container images and build outputs.
• Define standards for repository structure, retention, access, immutability, traceability, and auditable artifact promotion across environments.
• Integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines.
• Enable SBOM generation and validation, artifact signing, provenance verification and integrity controls.
• Reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation.
• Partner with engineering, security, architecture, and risk teams to define secure controls and respond to supply-chain incidents.
• Automate cloud deployment, configuration, policy enforcement, evidence collection and compliance reporting through infrastructure and application as code.
• Monitor platform health, performance and availability, lead incident management and recommend enhancements.

Skills

Artifact platforms

Supply-chain security

CI/CD

SBOMs

Code signing

Vulnerability management

Python

Go

Terraform

Helm

Ansible

Kubernetes

Cloud-native

Tools

Terraform

Helm

Ansible

Kubernetes

Job description

Job Description

Platform Engineer – Artifact Management and Software Supply Chain Security

Your Role

Are you experienced in enterprise artifact platforms and motivated to improve software supply-chain security, integrity, and traceability?

We are seeking a Platform Engineer to secure and operate enterprise artifact and open-source services.

• Engineer and operate enterprise repositories and registries for packages, binaries, container images and build outputs.
• Define standards for repository structure, retention, access, immutability, traceability, and auditable artifact promotion across environments.
• Integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines.
• Enable SBOM generation and validation, artifact signing, provenance verification and integrity controls.
• Reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation.
• Partner with engineering, security, architecture, and risk teams to define secure controls and respond to supply-chain incidents.
• Automate cloud deployment, configuration, policy enforcement, evidence collection and compliance reporting through infrastructure and application as code.
• Monitor platform health, performance and availability, lead incident management and recommend enhancements.

Your Team

You will join the Core Platform Engineering team in Group Technology Services, delivering enterprise artifact-management and software supply-chain services.

You will focus on repositories, open-source governance, secure SDLC integration and resilient cloud platforms, collaborating with engineering, security, architecture, and risk teams globally.

We are committed to diversity, equity, and inclusion.

Experience and Skills

You have:

• Experience operating enterprise artifact platforms and supply-chain security controls.
• Knowledge of repositories, CI/CD, open-source governance, SBOMs, signing and vulnerability management.
• Python or Go programming skills.
• Proficiency in Terraform, Helm or Ansible and automated security controls.
• Firsthand cloud-native and Kubernetes experience.

You are:

• Security-minded, with practical supply-chain knowledge.
• Able to automate developer-friendly security controls.
• Able to balance productivity, security, and compliance.
• Able to influence teams and promote standards.