Platform Engineer – Artifact Management and Software Supply Chain Security

Platform Engineer - Artifact Management and Software Supply Chain Security

Your Role

Are you experienced in enterprise artifact platforms and motivated to improve software supply-chain security, integrity, and traceability?

We are seeking a Platform Engineer to secure and operate enterprise artifact and open-source services.

• Engineer and operate enterprise repositories and registries for packages, binaries, container images and build outputs.

• Define standards for repository structure, retention, access, immutability, traceability, and auditable artifact promotion across environments.

• Integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines.

• Enable SBOM generation and validation, artifact signing, provenance verification and integrity controls.

• Reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation.

• Partner with engineering, security, architecture, and risk teams to define secure controls and respond to supply-chain incidents.

• Automate cloud deployment, configuration, policy enforcement, evidence collection and compliance reporting through infrastructure and application as code.

• Monitor platform health, performance and availability, lead incident management and recommend enhancements.

Your Team

You will join the Core Platform Engineering team in Group Technology Services, delivering enterprise artifact-management and software supply-chain services.

You will focus on repositories, open-source governance, secure SDLC integration and resilient cloud platforms, collaborating with engineering, security, architecture, and risk teams globally.

We are committed to diversity, equity, and inclusion.

Experience and Skills

You have:

• Experience operating enterprise artifact platforms and supply-chain security controls.

• Knowledge of repositories, CI/CD, open-source governance, SBOMs, signing and vulnerability management.

• Python or Go programming skills.

• Proficiency in Terraform, Helm or Ansible and automated security controls.

• Firsthand cloud-native and Kubernetes experience.

You are:

• Security-minded, with practical supply-chain knowledge.

• Able to automate developer-friendly security controls.

• Able to balance productivity, security, and compliance.

• Able to influence teams and promote standards.