Senior Platform Engineer

We are implementing a central package management platform and need aSenior Platform Engineer to lead hands-on delivery and security automation. You will work in a self-managed three-person consultant team, handling platform administration, identity integration, and developer enablement with limited client direction. Apply now to help harden and scale package operations.

Responsibilities

• Deliver hands-on platform engineering, package management, and SaaS administration for the selected platform (JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith)
• Implement and sustain security controls including upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotion
• Build integrations with the client identity and engineering landscape, including GitHub Enterprise Cloud, Entra ID security groups, OIDC, and access provisioning
• Administer platform configuration, repositories, access models, and policies through Infrastructure-as-Code, APIs, or comparable automation such as Pulumi
• Support developer enablement for NuGet, PyPI, CRAN, Maven/Gradle, npm, and Docker/OCI ecosystems
• Contribute to requirements gathering, technical validation of candidate platforms, and implementation planning
• Support users of the interim JFrog Artifactory environment as part of shared team capacity (~10% total team effort)
• Produce clear technical documentation, operational procedures, and runbooks
• Collaborate with the team lead and the other Senior Platform Engineer to plan tasks, surface risks, and maintain delivery momentum

Requirements

• Proven 5+ years of software development experience with a practical grasp of package consumption, build, publishing, and troubleshooting processes
• Hands-on experience with enterprise package/artifact management platforms, including at least one of JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith
• Demonstrated experience operating enterprise SaaS platforms across IAM, security, observability, operational processes, and vendor support
• Strong Infrastructure-as-Code / Configuration-as-Code mindset for managing configuration, repositories, access models, and policies through APIs, Pulumi, or comparable tools
• Solid background in software supply-chain security controls, including upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotion
• Hands-on experience integrating engineering platforms with enterprise identity and modern workload authentication patterns, including Entra ID, security groups, SSO, OIDC, GitHub Apps, or other short-lived credentials
• Working knowledge across several package ecosystems including NuGet/.NET, Python/PyPI, R/CRAN, Java/Maven/Gradle, JavaScript/npm, Docker/OCI
• Ability to produce concise technical documentation, architecture decisions, operational procedures, and implementation plans suitable for an enterprise environment

Nice to have

• Experience with GitHub Actions and short-lived workload credentials to avoid long-lived personal access tokens
• Experience with enterprise audit, logging, monitoring, and segregation-of-duties controls
• Exposure to regulated industries or enterprise-scale developer platforms with thousands of consuming developers