Build & Deployment Manager – JFrog Artifactory – 11870CF

Overview

In this Build & Deployment Manager role, you own secure software delivery and supply-chain controls in a complex, regulated tech environment. You will lead DevSecOps activities across Artifactory/Xray, GitHub Enterprise, and CI/CD tools to enable auditable, repeatable pipelines. You collaborate with engineering, security, and application teams to embed security without slowing delivery. This hands-on position offers impact through shaping secure deployment practices and enterprise tooling. You will work at scale to improve security across the software delivery lifecycle.

Responsibilities

• Administer Artifactory and Xray including repos, permissions, and scanning
• Design and support secure CI/CD pipelines across multiple tech stacks
• Manage GitHub Enterprise including repos, PRs, permissions, releases, and tooling integration
• Embed security controls such as SAST, SCA, SBOM, secrets detection, and policy gates
• Oversee vulnerability lifecycle from discovery to closure with triage and remediation
• Integrate vulnerability data with ServiceNow for remediation tracking
• Automate processes using PowerShell, Bash, Python, REST APIs, and configuration-as-code
• Support build/deploy tools like TeamCity, Octopus Deploy, GitHub Actions, and Azure DevOps
• Troubleshoot end-to-end across delivery lifecycle and environments
• Produce technical designs, reusable pipeline standards, SOPs and audit evidence
• Operate within formal change, incident, release, and vulnerability-management processes
• Contribute to DevSecOps/platform engineering initiatives in a regulated context

Key requirements

• Hands-on experience with JFrog Artifactory and Xray
• Proven ability to design and support secure CI/CD pipelines
• Strong knowledge of GitHub Enterprise and modern source control
• Understanding of artefact repositories, package managers, and artefact promotion
• Practical knowledge of secure coding and vulnerability remediation
• Experience managing vulnerabilities through their lifecycle
• Experience integrating security tooling with ServiceNow (Vulnerability/ Application Vulnerability Response)
• Strong scripting and automation skills with REST APIs and configuration-as-code
• Experience with Windows and Linux build agents, TLS, secrets management, logging, access controls
• Familiarity with JFrog Advanced Security/Curation, GitHub Advanced Security, CodeQL, Dependabot, Terraform, Docker, Kubernetes, SBOMs, software signing/attestation (advantageous)
• Knowledge of Java, .NET, JavaScript/TypeScript, Python or Go is useful but not required

• Collaborative teamwork
• Problem-solving mindset
• Strong communication
• JFrog Artifactory
• JFrog Xray
• GitHub Enterprise

…