Platform Engineer – Secure Artifact & Software Supply Chain

Test Triangle Limited; Greater London; On-site; GBP 80,000 - 115,000; Full time

Job summary

Test Triangle Limited in London is seeking a Platform Engineer to secure and operate enterprise artifact and open-source services, with a focus on repositories for packages, binaries, container images and build outputs. You will define standards for repository structure, retention, and auditable artifact promotion across environments.

The role involves integrating software composition analysis, SBOM generation, artifact signing, and automated security gates into CI/CD, and reducing supply-chain

Qualifications

• Experience operating enterprise artifact platforms and supply-chain security controls.
• Knowledge of repositories, CI/CD, open-source governance, SBOMs, signing and vulnerability management.
• Python or Go programming skills.
• Proficiency in Terraform, Helm or Ansible and automated security controls.
• Firsthand cloud-native and Kubernetes experience.

Responsibilities

• Engineer and operate enterprise repositories and registries for packages, binaries, container images and build outputs.
• Define standards for repository structure, retention, access, immutability, traceability, and auditable artifact promotion across environments.
• Integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines.
• Enable SBOM generation and validation, artifact signing, provenance verification and integrity controls.
• Reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation.
• Partner with engineering, security, architecture, and risk teams to define secure controls and respond to supply-chain incidents.
• Automate cloud deployment, configuration, policy enforcement, evidence collection and compliance reporting through infrastructure and application as code.
• Monitor platform health, performance and availability, lead incident management and recommend enhancements.

Skills

Artifact platforms operations

Supply chain security controls

CI/CD integration

SBOMs

Signing and provenance

Security-minded

Automation

Tools

Terraform

Helm

Ansible

Python

Go

Kubernetes

Job description

Test Triangle Limited in London is seeking a Platform Engineer to secure and operate enterprise artifact and open-source services, with a focus on repositories for packages, binaries, container images and build outputs. You will define standards for repository structure, retention, and auditable artifact promotion across environments.

The role involves integrating software composition analysis, SBOM generation, artifact signing, and automated security gates into CI/CD, and reducing supply-chain