Senior Platform Engineer – Package Management

We are building a secure central package management platform and need a Senior Platform Engineer to drive selection, rollout, and automation. You will work hands-on in a self-managed three-person consultant team across implementation, security, and integrations with minimal daily client oversight. Apply now to help deliver a reliable enterprise platform. Responsibilities Deliver hands-on platform engineering, package management, and SaaS administration for the selected platform (JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith)Implement and maintain security controls including upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotionBuild integrations across the client identity and engineering landscape, including GitHub Enterprise Cloud, Entra ID security groups, OIDC, and access provisioningManage platform configuration, repositories, access models, and policies using Infrastructure-as-Code, APIs, or comparable automation such as PulumiSupport developer enablement across core ecosystems including NuGet, PyPI, CRAN, Maven/Gradle, npm, and Docker/OCIContribute to requirements gathering, technical validation of candidate platforms, and implementation planningSupport users of the current interim JFrog Artifactory environment as part of shared team capacity (~10% total team effort)Produce clear technical documentation, operational procedures, and runbooksCollaborate proactively with the team lead and the other Senior Platform Engineer to plan tasks, surface risks, and maintain delivery momentum Requirements Proven 5+ years of software development experience with practical knowledge of how teams consume, build, publish, and troubleshoot internal and external packagesHands-on experience with enterprise package/artifact management platforms, including at least one of JFrog Artifactory, Sonatype Nexus Repository, or CloudsmithDemonstrated experience operating enterprise SaaS platforms, covering identity, access management, security, observability, operational processes, and vendor supportStrong Infrastructure-as-Code / Configuration-as-Code approach for managing configuration, access models, repositories, and policies via APIs, Pulumi, or similar toolingSolid background in software supply-chain security controls, including public upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotionHands-on experience integrating engineering platforms with enterprise identity and modern workload authentication patterns such as Entra ID, security groups, SSO, OIDC, GitHub Apps, or other short-lived credentialsWorking knowledge across common package ecosystems, including several of NuGet/.NET, Python/PyPI, R/CRAN, Java/Maven/Gradle, JavaScript/npm, Docker/OCIAbility to write concise technical documentation, architecture decisions, operational procedures, and implementation plans for an enterprise environment Nice to have Experience with GitHub Actions and short-lived workload credentials, avoiding long-lived personal access tokensExperience with enterprise audit, logging, monitoring, and segregation-of-duties controlsExposure to regulated industries or enterprise-scale developer platforms with thousands of consuming developers We offer We connect like-minded people:Delivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growth:Leadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersWe cover it all:Monetary bonuses for engaging in the referral programMedical & family care packageSix trust days per year (sick leave without a medical certificate)Coverage of psychology sessions of your choiceDiscounts for fitness clubs and sports programsBenefits package (sports activities, a variety of stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments. Experience the freedom of remote work from anywhere in Kyrgyzstan, whether it's the comfort of your home or our modern office in Bishkek.