platform engineer for package management platforms

EPAM provides enterprise software products, open source solutions, and accelerators.

• Deliver hands-on platform engineering, package management, and SaaS administration for JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith;
• Implement and maintain upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, quarantine, and controlled promotion;
• Build integrations with GitHub Enterprise Cloud, Entra ID security groups, OIDC, and access provisioning;
• Manage platform configuration, repositories, access models, and policies through Infrastructure-as-Code, APIs, Pulumi, or comparable automation;
• Support developer enablement across NuGet, PyPI, CRAN, Maven/Gradle, npm, and Docker/OCI;
• Contribute to requirements gathering, technical validation of candidate platforms, and implementation planning;
• Support users of the interim JFrog Artifactory environment as part of shared team capacity, approximately 10% of total team effort;
• Produce technical documentation, operational procedures, and runbooks;
• Collaborate with the team lead and another Senior Platform Engineer to plan tasks, surface risks, and maintain delivery momentum.

• Have 5+ years of software development experience and understand how development teams consume, build, publish, and troubleshoot external and internal packages;
• Have hands-on experience with at least one enterprise package or artifact management platform: JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith;
• Have experience operating and managing enterprise SaaS platforms, including identity, access management, security, observability, operational processes, and vendor support;
• Apply an Infrastructure-as-Code or Configuration-as-Code approach to platform configuration, access models, repositories, and policies;
• Have experience with software supply-chain security controls, including upstream proxying, vulnerability and malware scanning, policy enforcement, license controls, package quarantine, and controlled promotion;
• Have experience integrating engineering platforms with enterprise identity and modern workload authentication patterns, including Entra ID, security groups, SSO, OIDC, GitHub Apps, or short-lived credentials;
• Have working knowledge of several package ecosystems: NuGet/.NET, Python/PyPI, R/CRAN, Java/Maven/Gradle, JavaScript/npm, and Docker/OCI;
• Be able to produce concise technical documentation, architecture decisions, operational procedures, and implementation plans for an enterprise environment;
• Nice to have: GitHub Actions and short-lived workload credentials, enterprise audit, logging, monitoring, and segregation-of-duties controls, regulated industries or enterprise-scale developer platforms with thousands of consuming developers.

• No conditions specified