Senior Platform Engineer - Software Supply Chain

We are standing up an enterprise package management platform and need a Senior Platform Engineer to deliver secure implementation and automation. You will work independently in a self-managed three-person consultant team, covering platform administration, integrations, and developer enablement with minimal client supervision. Apply now to help modernize software supply-chain controls. Experience the freedom of remote work from anywhere in Uzbekistan, whether it's the comfort of your home or our modern office in Tashkent. Responsibilities Execute hands-on platform engineering, package management, and SaaS administration for the chosen platform (JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith)Implement and operate security controls including upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotionIntegrate the platform with the client identity and engineering environment, including GitHub Enterprise Cloud, Entra ID security groups, OIDC, and access provisioningMaintain platform configuration, repositories, access models, and policies through Infrastructure-as-Code, APIs, or comparable automation such as PulumiSupport developer enablement across ecosystems including NuGet, PyPI, CRAN, Maven/Gradle, npm, and Docker/OCIAssist with requirements gathering, technical validation of candidate platforms, and implementation planningProvide support for users of the interim JFrog Artifactory environment as part of shared team capacity (~10% total team effort)Write clear technical documentation, operational procedures, and runbooksPartner with the team lead and the other Senior Platform Engineer to plan tasks, surface risks, and sustain delivery momentum Requirements Strong 5+ years of software development experience with an applied understanding of package build, publishing, consumption, and troubleshooting workflowsHands-on experience with at least one enterprise artifact management platform: JFrog Artifactory, Sonatype Nexus Repository, or CloudsmithDemonstrated ability to operate enterprise SaaS platforms, including identity, access management, security, observability, operational processes, and vendor supportDeep Infrastructure-as-Code / Configuration-as-Code experience for managing configuration, repositories, policies, and access models using APIs, Pulumi, or similar toolingProven track record implementing software supply-chain security controls such as upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotionSolid experience integrating engineering platforms with enterprise identity and modern authentication patterns, including Entra ID, security groups, SSO, OIDC, GitHub Apps, or other short-lived credentialsWorking knowledge across several package ecosystems such as NuGet/.NET, Python/PyPI, R/CRAN, Java/Maven/Gradle, JavaScript/npm, Docker/OCIAbility to produce concise technical documentation, architecture decisions, operational procedures, and implementation plans fit for enterprise use Nice to have Experience with GitHub Actions and short-lived workload credentials to avoid long-lived personal access tokensExperience with enterprise audit, logging, monitoring, and segregation-of-duties controlsExposure to regulated industries or enterprise-scale developer platforms with thousands of consuming developers We offer We connect like-minded people:Delivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growth:Leadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersDiscounts in local language schools, including offline courses for the Uzbek languageWe cover it all:Monetary bonuses for engaging in the referral programMedical & family care packageFour trust days per year (sick leave without a medical certificate)Discounts for fitness clubs, dance schools and sports programsBenefits package (sports activities, a variety of stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.