Platform Engineer
Role details
Job location
Tech stack
Job description
AWS Platform Engineering
- Design and deploy AWS infrastructure to host Sonatype Nexus Repository.
- Provision and manage Amazon EC2 instances running Linux.
- Configure VPCs, subnets, route tables, security groups, and network ACLs.
- Configure Application Load Balancers (ALB) where appropriate.
- Implement scalable and resilient infrastructure aligned with AWS best practices.
- Configure Amazon EBS volumes for Nexus data storage.
- Configure Amazon S3 for backups and artefact archival where required.
- Configure Route 53 DNS records.
- Implement backup, recovery, and disaster recovery procedures.
Nexus Repository Deployment
-
Install, configure, and administer Sonatype Nexus Repository Manager.
-
Configure hosted, proxy, and group repositories.
-
Configure repository formats including:
-
Maven
-
Docker
-
npm
-
NuGet
-
PyPI
-
Raw repositories
Configure blob stores.
Implement repository cleanup and retention policies.
Configure HTTPS and SSL/TLS certificates.
Integrate Nexus with enterprise authentication services such as LDAP or Active Directory.
Perform upgrades, patching, and ongoing maintenance.
Linux Administration
- Install and maintain Red Hat Enterprise Linux, Amazon Linux, or Ubuntu.
- Configure storage, file systems, and system services.
- Manage users, permissions, and access controls.
- Troubleshoot operating system, networking, and application issues.
- Optimise server performance and resource utilisation.
Automation & Infrastructure as Code Develop and maintain automated deployments using:
- Terraform
- AWS CloudFormation (desirable)
- Ansible
- Bash or PowerShell scripting
- Git
Automate:
- Infrastructure provisioning
- Nexus installation and configuration
- Server configuration
- Backup procedures
- Patch management
- Disaster recovery processes
Security Implement AWS and Linux security best practices, including:
- IAM roles and policies
- Least-privilege access
- AWS KMS encryption
- AWS Secrets Manager or Systems Manager Parameter Store
- Security Groups and network segmentation
- Operating system hardening
- Certificate management
- Vulnerability remediation
- Audit logging and compliance
Monitoring & Operations Implement monitoring and alerting using:
- Amazon CloudWatch
- CloudWatch Logs
- CloudTrail
- AWS Config
Support:
- Platform monitoring
- Capacity planning
- Performance tuning
- Log management
- Incident response
- Root cause analysis
CI/CD Integration Integrate Nexus with CI/CD platforms including:
- Jenkins
- GitHub Actions
- GitLab CI
- Azure DevOps
Support:
- Artefact publishing
- Docker image repositories
- Dependency proxying
- Build optimisation
- Secure software supply chain practices
Requirements
We are seeking an experienced Platform Engineer to design, deploy, configure, and support a highly available Sonatype Nexus Repository Manager on Amazon Web Services (AWS) EC2 infrastructure. The successful candidate will have strong experience in AWS, Linux administration, automation, Infrastructure as Code (IaC), and DevOps practices to deliver a secure, scalable, and resilient Nexus platform. The role focuses on AWS infrastructure engineering, Linux systems administration, automation, security, and operational excellence., AWS (Primary Requirement) Strong experience with:
- Amazon EC2
- IAM
- VPC
- Route 53
- Elastic Load Balancing (ALB)
- Amazon EBS
- Amazon S3
- CloudWatch
- CloudTrail
- AWS Config
- Systems Manager
- Secrets Manager
- KMS
- Security Groups
Linux Strong administration experience with:
- Red Hat Enterprise Linux
- Amazon Linux
- Ubuntu
- Bash scripting
- Systemd
- Networking
- Storage management
- Package management
- Performance tuning
Infrastructure as Code & Automation Experience with:
- Terraform
- Ansible
- Git
- YAML
- Shell scripting
- CI/CD pipelines
Nexus Repository Experience with:
- Nexus Repository Manager installation and configuration
- Repository administration
- Blob store management
- Repository cleanup policies
- SSL/TLS configuration
- Backup and recovery
- Performance tuning
- User and role administration
Desirable Skills
- Docker
- Kubernetes (basic understanding)
- HashiCorp Vault
- Prometheus
- Grafana
- Sonatype Lifecycle (IQ Server)
- Apache or NGINX reverse proxy
- Enterprise identity integration (LDAP, Active Directory, SAML)