Platform Engineer - Artifact Management & Devsecops - London(Onsite)

iBSC; Greater London; On-site; GBP 111,000 - 166,000; Full time

Job summary

iBSC is seeking a Platform Engineer in London to own artifact management, CI/CD, and software supply chain security. The role focuses on administering enterprise repositories, strengthening pipelines, and embedding security into DevSecOps practices across cloud environments.

The candidate will implement SBOM generation, artifact signing, and vulnerability scanning, while automating infrastructure with Terraform and Ansible. On-site work is required.

Qualifications

• Hands-on experience administering enterprise artifact repositories.
• Secure delivery pipelines and DevSecOps practices.
• Experience in enterprise cloud environments.

Responsibilities

• Manage and administer JFrog Artifactory and/or Sonatype Nexus repositories.
• Configure repository access controls, permissions, retention policies and artifact life cycle management.
• Implement secure artifact promotion, traceability and vulnerability scanning.
• Integrate artifact management platforms into CI/CD pipelines.
• Implement SBOM generation and artifact signing.
• Automate infrastructure using Terraform and Ansible.
• Collaborate with dev, security and infra teams to improve software supply chain security.

Skills

Artifact repositories

CI/CD pipelines

DevSecOps

SBOM & artifact signing

SCA & vulnerability scanning

Python/Bash/Go scripting

Enterprise cloud experience

Tools

JFrog Artifactory

Sonatype Nexus

Jenkins

GitLab CI

GitHub Actions

Docker

Kubernetes

Helm

Terraform

Ansible

JFrog Xray

Sonatype IQ

Snyk

Trivy

Job description

Platform Engineer - Artifact Management & DevSecOps

Location: London, UK
Working Model: 5 days onsite (mandatory)
Contract Type: Contract
Duration:6 months rolling

INSIDE IR35

We are looking for an experienced Platform Engineer with strong expertise in Artifact Management, CI/CD and Software Supply Chain Security for an exciting contract opportunity based in London.

The ideal candidate will have hands‑on experience administering enterprise artifact repositories, securing software delivery pipelines and implementing DevSecOps best practices.

Key Responsibilities

• Manage and administer JFrog Artifactory and/or Sonatype Nexus repositories.

• Configure repository access controls, permissions, retention policies and artifact life cycle management.

• Implement secure artifact promotion, traceability and vulnerability scanning.

• Integrate artifact management platforms into CI/CD pipelines.

• Implement Software Composition Analysis (SCA), SBOM generation and artifact signing.

• Automate infrastructure and platform operations using Terraform, Ansible and Scripting.

• Collaborate with development, security and infrastructure teams to improve software supply chain security.

Essential Skills

• Strong hands‑on experience with JFrog Artifactory or Sonatype Nexus.

• CI/CD: Jenkins, GitLab CI or GitHub Actions.

• Containers: Docker, Kubernetes and Helm.

• Infrastructure as Code: Terraform and Ansible.

• Security tools: JFrog Xray, Sonatype IQ, Snyk, Trivy or similar.

• Knowledge of SBOM, artifact signing, vulnerability management and software supply chain security.

• Scripting experience with Python, Bash or Go.

• Experience working in enterprise cloud environments