Job Description

Onboarding subject to BGV clearance, so 2-3 weeks notice is okay.

5 Days onsite at London

Platform Engineer – Artifact Management and Software Supply Chain Security Your role Your role Are you experienced in enterprise artifact platforms and motivated to improve software supply-chain security, integrity, and traceability? We are seeking a Platform Engineer to secure and operate enterprise artifact and open-source services. • engineer and operate enterprise repositories and registries for packages, binaries, container images and build outputs. • define standards for repository structure, retention, access, immutability, traceability, and auditable artifact promotion across environments. • integrate software composition analysis, open-source governance, and automated security gates into CI/CD pipelines. • enable SBOM generation and validation, artifact signing, provenance verification and integrity controls. • reduce supply-chain risk through dependency governance, approved-source policies, continuous monitoring, and remediation. • partner with engineering, security, architecture, and risk teams to define secure controls and respond to supply-chain incidents. • automate cloud deployment, configuration, policy enforcement, evidence collection and compliance reporting through infrastructure and application as code. • monitor platform health, performance and availability, lead incident management and recommend enhancements. Your team Experience and skills You have: You will join the Core Platform Engineering team in Group Technology Services, delivering enterprise artifact-management and software supply-chain services. You will focus on repositories, open-source governance, secure SDLC integration and resilient cloud platforms, collaborating with engineering, security, architecture, and risk teams globally. We are committed to diversity, equity, and inclusion. • experience operating enterprise artifact platforms and supply-chain security controls. • knowledge of repositories, CI/CD, open-source governance, SBOMs, signing and vulnerability management • Python or Go programming skills. • proficiency in Terraform, Helm or Ansible and automated security controls. • Firsthand cloud-native and Kubernetes experience You are: • security-minded, with practical supply-chain knowledge. • able to automate developer-friendly security controls. • able to balance productivity, security, and compliance. • able to influence teams and promote standards.

͏

͏

͏