Senior Platform Engineer

We are forming a central artifact and package management capability and need a Senior Platform Engineer to implement it securely end-to-end. You will operate within a self-managed three-person consultant team, owning automation, integrations, and SaaS administration with limited day-to-day client direction. Apply now to help standardize and secure package delivery. Experience the freedom of remote work from anywhere in Uzbekistan, whether it's the comfort of your home or our modern office in Tashkent. Responsibilities Provide hands-on platform engineering, package management, and SaaS administration for the target platform (JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith)Maintain end-to-end security controls such as upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotionImplement integrations with the client identity and engineering ecosystem, including GitHub Enterprise Cloud, Entra ID security groups, OIDC, and access provisioningAutomate platform configuration, repositories, access models, and policies via Infrastructure-as-Code, APIs, or comparable tooling such as PulumiEnable developers across major ecosystems including NuGet, PyPI, CRAN, Maven/Gradle, npm, and Docker/OCIParticipate in requirements gathering, technical validation of candidate platforms, and implementation planningAssist users of the interim JFrog Artifactory setup as part of shared team capacity (~10% total team effort)Create and maintain technical documentation, operational procedures, and runbooksCoordinate with the team lead and the other Senior Platform Engineer to plan work, raise risks early, and keep delivery moving Requirements Extensive 5+ years of software development experience and a practical understanding of how development teams build, publish, consume, and troubleshoot packagesPractical experience with enterprise artifact/package platforms such as JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith (at least one required)Experience running enterprise SaaS platforms, including IAM, security, observability, operational processes, and working with vendor supportInfrastructure-as-Code / Configuration-as-Code mindset for controlling repositories, policies, configuration, and access models through APIs, Pulumi, or comparable toolsProven experience applying software supply-chain security controls like upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotionExperience integrating engineering platforms with enterprise identity and workload authentication, including Entra ID, security groups, SSO, OIDC, GitHub Apps, or other short-lived credentialsBroad working knowledge of package ecosystems, spanning several of NuGet/.NET, Python/PyPI, R/CRAN, Java/Maven/Gradle, JavaScript/npm, Docker/OCIStrong ability to produce clear technical documentation, architecture decisions, operational procedures, and implementation plans for enterprise stakeholders Nice to have Experience with GitHub Actions and short-lived workload credentials instead of long-lived personal access tokensFamiliarity with enterprise audit, logging, monitoring, and segregation-of-duties controlsExposure to regulated industries or enterprise-scale developer platforms serving thousands of developers We offer We connect like-minded people:Delivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growth:Leadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersDiscounts in local language schools, including offline courses for the Uzbek languageWe cover it all:Monetary bonuses for engaging in the referral programMedical & family care packageFour trust days per year (sick leave without a medical certificate)Discounts for fitness clubs, dance schools and sports programsBenefits package (sports activities, a variety of stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.