Senior Platform Engineer

About the role

We are seeking a Senior Platform Engineer to join a small, self‑managed consultant team responsible for designing and operating the client’s central package management platform. The role is hands‑on, covering platform selection, implementation, security, and automation while working independently with limited day‑to‑day client direction.

Key responsibilities

• Deliver platform engineering, package management, and SaaS administration for JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith.
• Implement and maintain security controls such as upstream proxying, vulnerability and malware scanning, policy enforcement, license management, quarantine, and controlled promotion.
• Build integrations with GitHub Enterprise Cloud, Entra ID security groups, OIDC, and access provisioning systems.
• Manage platform configuration, repositories, and access models using Infrastructure‑as‑Code tools (e.g., Pulumi) or APIs.
• Support developer enablement across ecosystems like NuGet, PyPI, CRAN, Maven/Gradle, npm, and Docker/OCI.
• Assist with requirements gathering, technical validation, and implementation planning.
• Provide support for the interim JFrog Artifactory environment (~10% of team effort).
• Create clear technical documentation, operational procedures, and runbooks.

Required profile

• 5+ years of software development experience with a solid understanding of package consumption, build, and publishing workflows.
• Hands‑on experience with at least one enterprise artifact management platform (JFrog Artifactory, Sonatype Nexus, or Cloudsmith).
• Proven ability to operate and manage enterprise SaaS platforms, including identity, access, security, and observability.
• Strong Infrastructure‑as‑Code mindset and experience with APIs or tools like Pulumi.
• Experience implementing software supply‑chain security controls and integrating with enterprise identity solutions.

Required skills

• JFrog Artifactory, Sonatype Nexus Repository, Cloudsmith
• Pulumi (or comparable IaC tool)
• Infrastructure‑as‑Code / Configuration‑as‑Code
• Entra ID, security groups, SSO, OIDC, GitHub Apps
• Package ecosystems: NuGet, PyPI, CRAN, Maven/Gradle, npm, Docker/OCI
• Vulnerability scanning, malware scanning, policy enforcement, license management, package quarantine