Senior Platform Engineer

About the role

EPAM is seeking a Senior Platform Engineer to join a self‑managed three‑person consultant team. You will lead the design, implementation, and operation of the client’s central package management platform, working independently with limited day‑to‑day client direction.

Key responsibilities

• Deliver hands‑on platform engineering, package management, and SaaS administration for JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith.
• Implement and maintain security controls such as upstream proxying, vulnerability/malware scanning, policy enforcement, license management, quarantine, and controlled promotion.
• Integrate the platform with client identity and engineering tools (GitHub Enterprise Cloud, Entra ID, OIDC, access provisioning).
• Manage platform configuration, repositories, access models, and policies via Infrastructure‑as‑Code, APIs, or Pulumi.
• Support developer enablement across NuGet, PyPI, CRAN, Maven/Gradle, npm, Docker/OCI ecosystems.
• Participate in requirements gathering, technical validation, and implementation planning.
• Provide support for the interim JFrog Artifactory environment (~10% of team effort).
• Produce clear technical documentation, operational procedures, and runbooks.

Required profile

• 5+ years of software development experience with a solid understanding of package consumption, build, publish, and troubleshooting processes.
• Hands‑on experience with at least one enterprise package/artifact management platform (JFrog Artifactory, Sonatype Nexus Repository, or Cloudsmith).
• Experience operating enterprise SaaS platforms, including identity, access management, security, observability, and vendor support.
• Strong Infrastructure‑as‑Code mindset using APIs, Pulumi, or comparable tooling.
• Knowledge of software supply‑chain security controls and modern authentication patterns.

Required skills

• JFrog Artifactory
• Sonatype Nexus Repository
• Cloudsmith
• Pulumi
• Infrastructure‑as‑Code / Configuration‑as‑Code
• Software supply‑chain security (upstream proxy, vulnerability scanning, policy enforcement)
• Entra ID, security groups, SSO, OIDC, GitHub Apps
• NuGet/.NET
• Python/PyPI
• R/CRAN
• Maven/Gradle
• npm
• Docker/OCI

What we offer

• Fully remote work from anywhere in Georgia.
• Access to modern offices in Tbilisi and Batumi, plus coworking space in Kutaisi.
• Opportunity to shape a critical enterprise platform within a collaborative, self‑managed team.