Build & Deployment Manager - JFrog Artifactory
Proactive Appointments · London ·
- Work mode
- Hybrid
- Category
- Management
Proactive Appointments · London ·
Build & Deployment Manager - JFrog Artifactory
4 days onsite - Inside IR35
Our client, a leading global financial services organisation, is looking for an experienced Build & Deployment Manager to join its engineering function and take ownership of secure software delivery and supply-chain controls across a complex, regulated technology environment.
This is a hands-on engineering role, focused on building, administering and continuously improving enterprise DevSecOps capabilities. You’ll work across JFrog Artifactory and Xray, GitHub Enterprise, CI/CD platforms and ServiceNow, helping development teams build, secure, package, deploy and manage software through repeatable, auditable pipelines.
The Role
You’ll provide technical ownership of secure software supply-chain controls across the organisation. You’ll work closely with engineering, security and application teams to embed appropriate security controls into delivery pipelines without creating unnecessary friction.
Your responsibilities will include:
Administering and supporting JFrog Artifactory and Xray, including repositories, permissions, package promotion, build information, retention policies and scanning.
Designing, implementing and supporting secure CI/CD pipelines across multiple technology stacks.
Managing GitHub Enterprise, including repositories, branching, pull requests, permissions, releases and integration with security/build tooling.
Embedding security controls including SAST, software composition analysis, dependency and artefact scanning, secrets detection, SBOM generation and policy-based gates.
Managing vulnerabilities from initial discovery and technical triage through ownership, prioritisation, remediation, validation and evidence-based closure.
Integrating vulnerability and software asset information with ServiceNow, supporting accurate application/service mapping and remediation tracking.
Automating processes using PowerShell, Bash, Python or equivalent, REST APIs and configuration-as-code.
Supporting build and deployment technologies such as TeamCity, Octopus Deploy, GitHub Actions and Azure DevOps.
Troubleshooting complex issues across source control, pipelines, dependencies, build agents, repositories, security tooling, deployment platforms and target environments.
Producing technical designs, reusable pipeline standards, operating procedures, support documentation and audit evidence.
Working within formal change, incident, problem, release and vulnerability-management processes.
We’re seeking an engineer with strong practical experience in DevSecOps, platform engineering or enterprise build and release engineering, ideally gained within a complex or regulated environment.
You should have:
Strong hands-on experience with JFrog Artifactory and Xray.
Proven experience designing and supporting secure CI/CD pipelines.
Strong knowledge of GitHub Enterprise and modern source-control practices.
A good understanding of artefact repositories, package managers, dependency management, immutable artefacts, provenance and controlled promotion.
Practical knowledge of secure coding, OWASP, application vulnerabilities and remediation approaches.
Experience managing vulnerabilities throughout their complete lifecycle.
Experience integrating security/vulnerability tooling with ServiceNow, ideally Vulnerability Response or Application Vulnerability Response.
Strong scripting and automation skills, alongside experience working with REST APIs and configuration-as-code.
Working knowledge of Windows and Linux build agents, credentials, certificates, TLS, secrets management, logging and access controls.
The ability to investigate and resolve complex technical issues across the software delivery lifecycle.
Experience with JFrog Advanced Security/Curation, GitHub Advanced Security, CodeQL, Dependabot, Terraform, Docker, Kubernetes, SBOMs, software signing/attestation or cloud-native platforms would be highly advantageous.
Knowledge of Java, .NET, JavaScript/TypeScript, Python or Go is useful, but this is not an application-development role. We’re primarily interested in your ability to understand different development ecosystems and engineer secure, reliable delivery processes.
Build & Deployment Manager - JFrog Artifactory
Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.
Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation
We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website http://proactive.it/privacy-notice/