Platform Engineer – Secure Artifact Management & DevSecOps

iBSC; Greater London; Presencial; GBP 111.000 - 166.000; Jornada completa

Descripción de la vacante

iBSC is seeking a Platform Engineer in London to own artifact management, CI/CD, and software supply chain security. The role focuses on administering enterprise repositories, strengthening pipelines, and embedding security into DevSecOps practices across cloud environments.

The candidate will implement SBOM generation, artifact signing, and vulnerability scanning, while automating infrastructure with Terraform and Ansible. On-site work is required.

Formación

• Hands-on experience administering enterprise artifact repositories.
• Secure delivery pipelines and DevSecOps practices.
• Experience in enterprise cloud environments.

Responsabilidades

• Manage and administer JFrog Artifactory and/or Sonatype Nexus repositories.
• Configure repository access controls, permissions, retention policies and artifact life cycle management.
• Implement secure artifact promotion, traceability and vulnerability scanning.
• Integrate artifact management platforms into CI/CD pipelines.
• Implement SBOM generation and artifact signing.
• Automate infrastructure using Terraform and Ansible.
• Collaborate with dev, security and infra teams to improve software supply chain security.

Conocimientos

Artifact repositories

CI/CD pipelines

DevSecOps

SBOM & artifact signing

SCA & vulnerability scanning

Python/Bash/Go scripting

Enterprise cloud experience

Herramientas

JFrog Artifactory

Sonatype Nexus

Jenkins

GitLab CI

GitHub Actions

Docker

Kubernetes

Helm

Terraform

Ansible

JFrog Xray

Sonatype IQ

Snyk

Trivy

Descripción del empleo

iBSC is seeking a Platform Engineer in London to own artifact management, CI/CD, and software supply chain security. The role focuses on administering enterprise repositories, strengthening pipelines, and embedding security into DevSecOps practices across cloud environments.

The candidate will implement SBOM generation, artifact signing, and vulnerability scanning, while automating infrastructure with Terraform and Ansible. On-site work is required.