Platform Engineer – Artifact Management and Software Supply Chain Security

Test Triangle Ltd; Greater London; On-site; GBP 80,000 - 115,000; Full time

Job summary

Test Triangle Limited in London is seeking a Platform Engineer to secure and operate enterprise artifact and open-source services, with a focus on repositories for packages, binaries, container images and build outputs. You will define standards for repository structure, retention, and auditable artifact promotion across environments.

The role involves integrating software composition analysis, SBOM generation, artifact signing, and automated security gates into CI/CD, and reducing supply-chain

Qualifications

• Experience operating enterprise artifact platforms and supply-chain security controls.
• Knowledge of repositories, CI/CD, open-source governance, SBOMs, signing and vulnerability management.
• Python or Go programming skills.
• Proficiency in Terraform, Helm or Ansible and automated security controls.
• Firsthand cloud-native and Kubernetes experience.

Responsibilities

• Engineer and operate enterprise repositories and registries for packages, binaries, container images and build outputs.
• Define standards for repository structure, retention, access, immutability, traceability, and auditable artifact promotion across environments.
• Integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines.
• Enable SBOM generation and validation, artifact signing, provenance verification and integrity controls.
• Reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation.
• Partner with engineering, security, architecture, and risk teams to define secure controls and respond to supply-chain incidents.
• Automate cloud deployment, configuration, policy enforcement, evidence collection and compliance reporting through infrastructure and application as code.
• Monitor platform health, performance and availability, lead incident management and recommend enhancements.

Skills

Artifact platforms operations

Supply chain security controls

CI/CD integration

SBOMs

Signing and provenance

Security-minded

Automation

Tools

Terraform

Helm

Ansible

Python

Go

Kubernetes

Job description

Platform Engineer – Artifact Management and Software Supply Chain Security

London, United Kingdom | Posted on 10/29/2026

Platform Engineer – Artifact Management and Software Supply Chain Security

Your Role

Are you experienced in enterprise artifact platforms and motivated to improve software supply-chain security, integrity, and traceability?

We are seeking a Platform Engineer to secure and operate enterprise artifact and open-source services.

Engineer and operate enterprise repositories and registries for packages, binaries, container images and build outputs.

Define standards for repository structure, retention, access, immutability, traceability, and auditable artifact promotion across environments.

Integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines.

Enable SBOM generation and validation, artifact signing, provenance verification and integrity controls.

Reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation.

Partner with engineering, security, architecture, and risk teams to define secure controls and respond to supply-chain incidents.

Automate cloud deployment, configuration, policy enforcement, evidence collection and compliance reporting through infrastructure and application as code.

Monitor platform health, performance and availability, lead incident management and recommend enhancements.

Your Team

You will join the Core Platform Engineering team in Group Technology Services, delivering enterprise artifact-management and software supply-chain services.

You will focus on repositories, open-source governance, secure SDLC integration and resilient cloud platforms, collaborating with engineering, security, architecture, and risk teams globally.

We are committed to diversity, equity, and inclusion.

Experience and Skills

You have:

Experience operating enterprise artifact platforms and supply-chain security controls.

Knowledge of repositories, CI/CD, open-source governance, SBOMs, signing and vulnerability management.

Python or Go programming skills.

Proficiency in Terraform, Helm or Ansible and automated security controls.

Firsthand cloud-native and Kubernetes experience.

You are:

Security-minded, with practical supply-chain knowledge.

Able to automate developer-friendly security controls.

Able to balance productivity, security, and compliance.

Able to influence teams and promote standards.