Senior Platform Engineer

About the role

We are building a central package management platform and need a Senior Platform Engineer to lead hands‑on delivery and security automation. You will work in a self‑managed three‑person consultant team, handling platform administration, identity integration, and developer enablement with limited client direction.

Key responsibilities

• Deliver platform engineering, package management, and SaaS administration for JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith.
• Implement and sustain security controls such as upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotion.
• Build integrations with client identity and engineering tools, including GitHub Enterprise Cloud, Entra ID security groups, OIDC, and access provisioning.
• Administer platform configuration, repositories, access models, and policies via Infrastructure‑as‑Code, APIs, or Pulumi.
• Support developer enablement for NuGet, PyPI, CRAN, Maven/Gradle, npm, and Docker/OCI ecosystems.
• Contribute to requirements gathering, technical validation, and implementation planning.
• Provide user support for the interim JFrog Artifactory environment (~10% of effort).
• Produce clear technical documentation, operational procedures, and runbooks.
• Collaborate with the team lead and another Senior Platform Engineer to plan tasks, surface risks, and maintain delivery momentum.

Required profile

• 5+ years of software development experience with package consumption, build, publishing, and troubleshooting.
• Hands‑on experience with at least one enterprise package/artifact management platform (JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith).
• Experience operating enterprise SaaS platforms across IAM, security, observability, and vendor support.
• Strong Infrastructure‑as‑Code / Configuration‑as‑Code mindset using APIs, Pulumi, or comparable tools.
• Solid background in software supply‑chain security controls.
• Experience integrating engineering platforms with enterprise identity solutions (Entra ID, security groups, SSO, OIDC, GitHub Apps, short‑lived credentials).
• Working knowledge of multiple package ecosystems (NuGet/.NET, Python/PyPI, R/CRAN, Java/Maven/Gradle, JavaScript/npm, Docker/OCI).
• Ability to produce concise technical documentation and implementation plans for an enterprise environment.

Required skills

• JFrog Artifactory
• Sonatype Nexus Repository
• Cloudsmith
• Pulumi
• Infrastructure‑as‑Code
• APIs for platform automation
• Entra ID
• OIDC
• GitHub Enterprise Cloud
• GitHub Apps
• Security groups & SSO
• NuGet
• PyPI
• CRAN
• Maven / Gradle
• npm
• Docker / OCI
• Software supply‑chain security controls (vulnerability scanning, license enforcement, quarantine, promotion)