Senior Platform Engineer

About the role

We are building a centralized artifact management service and need a Senior Platform Engineer to lead its implementation with a strong focus on security and automation. You will work within a self‑managed three‑person consultant team, handling the platform from validation through rollout with limited day‑to‑day client direction.

Key responsibilities

• Deliver platform engineering, package management and SaaS administration for JFrog Artifactory, Sonatype Nexus Repository or Cloudsmith.
• Operate and enhance security controls such as upstream proxying, vulnerability and malware scanning, policy enforcement, license management, quarantine and controlled promotion.
• Create integrations with client identity and engineering tools including GitHub Enterprise Cloud, Entra ID security groups, OIDC and access provisioning.
• Automate repository configuration, access models and policies using Infrastructure‑as‑Code, APIs or Pulumi.
• Enable developers across ecosystems like NuGet, PyPI, CRAN, Maven/Gradle, npm and Docker/OCI.
• Contribute to requirements gathering, technical validation and implementation planning.
• Provide user support for the interim Artifactory environment and produce clear documentation, runbooks and operational procedures.

Required profile

• 5+ years of software development experience with hands‑on knowledge of package artifact workflows.
• Experience with at least one enterprise artifact platform (JFrog Artifactory, Sonatype Nexus Repository, Cloudsmith).
• Proven ability to manage SaaS platforms focusing on identity, access management, security, observability and vendor engagement.
• Strong Infrastructure‑as‑Code / Configuration‑as‑Code expertise using APIs, Pulumi or comparable tools.
• Hands‑on experience with software supply‑chain security controls and integration of enterprise identity solutions (Entra ID, SSO, OIDC, GitHub Apps, short‑lived credentials).
• Working knowledge of multiple package ecosystems (NuGet, PyPI, CRAN, Maven/Gradle, npm, Docker/OCI).
• Ability to produce concise technical documentation and implementation plans.

Required skills

• JFrog Artifactory
• Sonatype Nexus Repository
• Cloudsmith
• Pulumi
• Infrastructure‑as‑Code (IaC)
• APIs for platform automation
• Entra ID / Azure AD
• OIDC
• GitHub Enterprise Cloud
• GitHub Apps / short‑lived credentials
• Vulnerability and malware scanning
• License management and policy enforcement
• NuGet, PyPI, CRAN, Maven/Gradle, npm, Docker, OCI