Platform Engineer – Artifact Management and Software Supply Chain Security

Are you experienced in enterprise artifact platforms and motivated to improve software supply-chain security integrity and traceability

We are seeking a Platform Engineer to secure and operate enterprise artifact and open-source services.

• Engineer and operate enterprise repositories and registries for packages binaries container images and build outputs.
  

• Define standards for repository structure retention access immutability traceability and auditable artifact promotion across environments.
  

• Integrate software composition analysis open-source governance and automated security gates into CI/CD pipelines.
  

• Enable SBOM generation and validation artifact signing provenance verification and integrity controls.
  

• Reduce supply-chain risk through dependency governance approved-source policies continuous monitoring and remediation.
  

• Partner with engineering security architecture and risk teams to define secure controls and respond to supply-chain incidents.
  

• Automate cloud deployment configuration policy enforcement evidence collection and compliance reporting through infrastructure and application as code.
  

• Monitor platform health performance and availability lead incident management and recommend enhancements.
  

You will join the Core Platform Engineering team in Group Technology Services delivering enterprise artifact-management and software supply-chain services.

You will focus on repositories open-source governance secure SDLC integration and resilient cloud platforms collaborating with engineering security architecture and risk teams globally.

We are committed to diversity equity and inclusion.

You have:

• Experience operating enterprise artifact platforms and supply-chain security controls.
  

• Knowledge of repositories CI/CD open-source governance SBOMs signing and vulnerability management.
  

• Python or Go programming skills.
  

• Proficiency in Terraform Helm or Ansible and automated security controls.
  

• Firsthand cloud-native and Kubernetes experience.
  

You are:

• Security-minded with practical supply-chain knowledge.
  

• Able to automate developer-friendly security controls.
  

• Able to balance productivity security and compliance.
  

• Able to influence teams and promote standards.