> Markdown version of [/jobs/ext/4079663-build-deployment-manager-jfrog-artifactory](https://www.wearedevelopers.com/jobs/ext/4079663-build-deployment-manager-jfrog-artifactory). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Build & Deployment Manager - JFrog Artifactory

- **Company:** Proactive.IT Appointments Ltd.
- **Location:** London, UK
- **Salary:** £156,000.0 - £165,100.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), .NET Framework, Microsoft Azure, Bash Shell, Encodings, Linux, Github, Python (Programming Language), Key Management, Octopus Deploy, Open Web Application Security, Package Management Systems, Windows PowerShell, Systems Development Life Cycle, Release Management, Secure Coding, Systems Integration, TypeScript, Data Logging, Transport Layer Security, Cloud Platform System, ServiceNow IT Service Management, Build Management, Kubernetes, Github Enterprise, Teamcity, Restful APIs, Terraform, Software Version Control, Devsecops, Docker, Service Stack, Servicenow, Static Application Security Testing, Artifactory
- **Published:** October 6, 2026
- **Apply:** https://www.proactive.it/job/build-deployment-manager-jfrog-artifactory-11870cf/

## About the Role

We're seeking an engineer with strong practical experience in DevSecOps, platform engineering or enterprise build and release engineering, ideally gained within a complex or regulated environment.

You should have:

 * Strong hands-on experience with JFrog Artifactory and Xray.
 * Proven experience designing and supporting secure CI/CD pipelines.
 * Strong knowledge of GitHub Enterprise and modern source-control practices.
 * A good understanding of artefact repositories, package managers, dependency management, immutable artefacts, provenance and controlled promotion.
 * Practical knowledge of secure coding, OWASP, application vulnerabilities and remediation approaches.
 * Experience managing vulnerabilities throughout their complete lifecycle.
 * Experience integrating security/vulnerability tooling with ServiceNow, ideally Vulnerability Response or Application Vulnerability Response.
 * Strong scripting and automation skills, alongside experience working with REST APIs and configuration-as-code.
 * Working knowledge of Windows and Linux build agents, credentials, certificates, TLS, secrets management, logging and access controls.
 * The ability to investigate and resolve complex technical issues across the software delivery lifecycle.

Experience with JFrog Advanced Security/Curation, GitHub Advanced Security, CodeQL, Dependabot, Terraform, Docker, Kubernetes, SBOMs, software signing/attestation or cloud-native platforms would be highly advantageous.

Knowledge of Java, .NET, JavaScript/TypeScript, Python or Go is useful, but this is not an application-development role. We're primarily interested in your ability to understand different development ecosystems and engineer secure, reliable delivery processes.

## Description

You'll provide technical ownership of secure software supply-chain controls across the organisation. You'll work closely with engineering, security and application teams to embed appropriate security controls into delivery pipelines without creating unnecessary friction.

Your responsibilities will include:

 * Administering and supporting JFrog Artifactory and Xray, including repositories, permissions, package promotion, build information, retention policies and scanning.
 * Designing, implementing and supporting secure CI/CD pipelines across multiple technology stacks.
 * Managing GitHub Enterprise, including repositories, branching, pull requests, permissions, releases and integration with security/build tooling.
 * Embedding security controls including SAST, software composition analysis, dependency and artefact scanning, secrets detection, SBOM generation and policy-based gates.
 * Managing vulnerabilities from initial discovery and technical triage through ownership, prioritisation, remediation, validation and evidence-based closure.
 * Integrating vulnerability and software asset information with ServiceNow, supporting accurate application/service mapping and remediation tracking.
 * Automating processes using PowerShell, Bash, Python or equivalent, REST APIs and configuration-as-code.
 * Supporting build and deployment technologies such as TeamCity, Octopus Deploy, GitHub Actions and Azure DevOps.
 * Troubleshooting complex issues across source control, pipelines, dependencies, build agents, repositories, security tooling, deployment platforms and target environments.
 * Producing technical designs, reusable pipeline standards, operating procedures, support documentation and audit evidence.
 * Working within formal change, incident, problem, release and vulnerability-management processes.