Senior Platform Engineer

We are looking for a Senior Platform Engineer to join a self-managed, three-person consultant team responsible for establishing the client's central package management platform. This role works hands-on across platform selection, implementation, security, and automation, operating independently within the team's shared backlog with limited day-to-day direction from the client. Unlock the potential of remote work in Kazakhstan, giving you the flexibility to work from home or access our offices in Astana, Almaty or Karaganda. Responsibilities Deliver hands-on platform engineering, package management, and SaaS administration for the target platform (JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith)Implement and maintain security controls: upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotionBuild integrations with the client identity and engineering landscape — GitHub Enterprise Cloud, Entra ID security groups, OIDC, access provisioningManage platform configuration, repositories, access models, and policies through Infrastructure-as-Code, APIs, or comparable automation (e.g., Pulumi)Support developer enablement across key package ecosystems (NuGet, PyPI, CRAN, Maven/Gradle, npm, Docker/OCI)Contribute to requirements gathering, technical validation of candidate platforms, and implementation planningSupport users of the current interim JFrog Artifactory environment as part of shared team capacity (~10% total team effort)Produce clear technical documentation, operational procedures, and runbooksCollaborate proactively with the team lead and the other Senior Platform Engineer to plan tasks, surface risks, and maintain delivery momentum Requirements 5+ years of software development experience with practical understanding of how development teams consume, build, publish, and troubleshoot external and internal packagesHands-on experience with enterprise package/artifact management platforms — at least one of JFrog Artifactory, Sonatype Nexus Repository, or CloudsmithExperience operating and managing enterprise SaaS platforms: identity, access management, security, observability, operational processes, and vendor supportStrong Infrastructure-as-Code / Configuration-as-Code mindset — managing platform configuration, access models, repositories, and policies through APIs, Pulumi, or comparable toolingExperience with software supply-chain security controls: public upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, package quarantine, and controlled promotionExperience integrating engineering platforms with enterprise identity and modern workload authentication patterns — Entra ID, security groups, SSO, OIDC, GitHub Apps, or other short-lived credentialsWorking knowledge across common package ecosystems — several of: NuGet/.NET, Python/PyPI, R/CRAN, Java/Maven/Gradle, JavaScript/npm, Docker/OCIAbility to produce concise technical documentation, architecture decisions, operational procedures, and implementation plans suitable for an enterprise environment Nice to have Experience with GitHub Actions and short-lived workload credentials (avoiding long-lived personal access tokens)Experience with enterprise audit, logging, monitoring, and segregation-of-duties controlsExposure to regulated industries or enterprise-scale developer platforms (thousands of consuming developers) We offer We connect like-minded people:Delivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growth:Leadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersDiscounts in local language schools, including online courses for the Kazakh languageWe cover it all:Participation in the Employee Stock Purchase PlanMonetary bonuses for engaging in the referral programMedical & family care packageSix trust days per year (sick leave without a medical certificate)Coverage of psychology sessions of your choiceBenefits package (sports activities, a variety of stores and services)Housing support program: preferential mortgage access via Otbasy Bank partnership EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.