Build & Deployment Manager – JFrog Artifactory
4 days onsite – Inside IR35
Our client, a leading global financial services organisation, is looking for an experienced Build & Deployment Manager to join its engineering function and take ownership of secure software delivery and supply-chain controls across a complex, regulated technology environment.
This is a hands-on engineering role, focused on building, administering and continuously improving enterprise DevSecOps capabilities. You’ll work across JFrog Artifactory and Xray, GitHub Enterprise, CI/CD platforms and ServiceNow, helping development teams build, secure, package, deploy and manage software through repeatable, auditable pipelines.
The Role
You’ll provide technical ownership of secure software supply-chain controls across the organisation. You’ll work closely with engineering, security and application teams to embed appropriate security controls into delivery pipelines without creating unnecessary friction.
Your responsibilities will include:
- Administering and supporting JFrog Artifactory and Xray, including repositories, permissions, package promotion, build information, retention policies and scanning.
- Designing, implementing and supporting secure CI/CD pipelines across multiple technology stacks.
- Managing GitHub Enterprise, including repositories, branching, pull requests, permissions, releases and integration with security/build tooling.
- Embedding security controls including SAST, software composition analysis, dependency and artefact scanning, secrets detection, SBOM generation and policy-based gates.
- Managing vulnerabilities from initial discovery and technical triage through ownership, prioritisation, remediation, validation and evidence-based closure.
- Integrating vulnerability and software asset information with ServiceNow, supporting accurate application/service mapping and remediation tracking.
- Automating processes using PowerShell, Bash, Python or equivalent, REST APIs and configuration-as-code.
- Supporting build and deployment technologies such as TeamCity, Octopus Deploy, GitHub Actions and Azure DevOps.
- Troubleshooting complex issues across source control, pipelines, dependencies, build agents, repositories, security tooling, deployment platforms and target environments.
- Producing technical designs, reusable pipeline standards, operating procedures, support documentation and audit evidence.
- Working within formal change, incident, problem, release and vulnerability-management processes.
What We’re Looking For
We’re seeking an engineer with strong practical experience in DevSecOps, platform engineering or enterprise build and release engineering, ideally gained within a complex or regulated environment.
You should have:
- Strong hands-on experience with JFrog Artifactory and Xray.
- Proven experience designing and supporting secure CI/CD pipelines.
- Strong knowledge of GitHub Enterprise and modern source-control practices.
- A good understanding of artefact repositories, package managers, dependency management, immutable artefacts, provenance and controlled promotion.
- Practical knowledge of secure coding, OWASP, application vulnerabilities and remediation approac
#J-18808-Ljbffr…