In this Build & Deployment Manager role, you own secure software delivery and supply-chain controls in a complex, regulated tech environment. You will lead DevSecOps activities across Artifactory/Xray, GitHub Enterprise, and CI/CD tools to enable auditable, repeatable pipelines. You collaborate with engineering, security, and application teams to embed security without slowing delivery. This hands-on position offers impact through shaping secure deployment practices and enterprise tooling. You will work at scale to improve security across the software delivery lifecycle.
Responsibilities
Administer Artifactory and Xray including repos, permissions, and scanning
Design and support secure CI/CD pipelines across multiple tech stacks
Manage GitHub Enterprise including repos, PRs, permissions, releases, and tooling integration
Embed security controls such as SAST, SCA, SBOM, secrets detection, and policy gates
Oversee vulnerability lifecycle from discovery to closure with triage and remediation
Integrate vulnerability data with ServiceNow for remediation tracking
Automate processes using PowerShell, Bash, Python, REST APIs, and configuration-as-code
Support build/deploy tools like TeamCity, Octopus Deploy, GitHub Actions, and Azure DevOps
Troubleshoot end-to-end across delivery lifecycle and environments
Produce technical designs, reusable pipeline standards, SOPs and audit evidence
Operate within formal change, incident, release, and vulnerability-management processes
Contribute to DevSecOps/platform engineering initiatives in a regulated context
Key requirements
Hands-on experience with JFrog Artifactory and Xray
Proven ability to design and support secure CI/CD pipelines
Strong knowledge of GitHub Enterprise and modern source control
Understanding of artefact repositories, package managers, and artefact promotion
Practical knowledge of secure coding and vulnerability remediation
Experience managing vulnerabilities through their lifecycle
Experience integrating security tooling with ServiceNow (Vulnerability/ Application Vulnerability Response)
Strong scripting and automation skills with REST APIs and configuration-as-code
Experience with Windows and Linux build agents, TLS, secrets management, logging, access controls
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.