> Markdown version of [/jobs/ext/4719870-platform-engineer-with-nexus-repository-and-sonatype](https://www.wearedevelopers.com/jobs/ext/4719870-platform-engineer-with-nexus-repository-and-sonatype). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Platform Engineer with Nexus Repository and Sonatype

- **Company:** Hexaware Technologies
- **Location:** Alpharetta, GA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Bash Shell, Continuous Integration, Github, Identity and Access Management, Python (Programming Language), Apache Maven, Cisco Nexus Switches, NuGet, Open Source Technology, Tensorflow, Software Engineering, Software Vulnerability Management, Scripting, Enterprise Software Applications, Sonatype, Gitlab, Build Management, Free and Open-Source Software, Npm(Software), Functional Programming, Cloudwatch, Oracle Cloud Infrastructure
- **Published:** November 14, 2026
- **Apply:** https://www.dice.com/job-detail/a0863076-16cd-4ca6-9e53-a45d1726cfdb

## About the Role

* 8+ years of Overall IT Exp.
 * 3+ years of Platform Engineering, Software Supply Chain Engineering, or Open Source Governance experience.
 * Hands-on experience with Sonatype Lifecycle (IQ Server) and Nexus Repository required.
 * Experience creating and maintaining automated Open Source Software policies, workflows, and telemetry/reporting for component usage, licensing, and vulnerability tracking.
 * Experience implementing artifact signing technologies (Sigstore/Cosign, GPG, Notary, etc.).
 * Experience with SLSA provenance, in-toto attestations, or similar frameworks.
 * Experience with SBOM generation (CycloneDX, SPDX, Syft).
 * CI/CD experience with GitLab preferred (or comparable tooling, e.g. GitHub Actions).
 * Strong AWS experience (IAM, ECS/EKS, EC2, S3, Lambda, Step Function, CloudWatch).
 * Strong scripting skills (Python, Bash, or Go).

Familiarity with OCI registries and package ecosystems (Maven, npm, PyPI, NuGet).

## Description

* Execute on enterprise software supply chain initiatives, supporting secure software delivery.
 * Enhance Sonatype Repository artifact management, IQ firewall policy governance, open-source software lifecycle, and telemetry reporting.
 * Implement software approval workflows, quarantine waiver, and lifecycle management processes.
 * Coordinate dependency upgrades and vulnerability remediation workflows.
 * Support onboarding of emerging ecosystems, including AI/ML frameworks.
 * Develop reporting and metrics for software supply chain health, policy compliance, and repository utilization.
 * Develop CI/CD artifact signing and verification capabilities for software builds.
 * Implement SLSA build provenance and attestations across CI/CD platforms.
 * Integrate SBOM generation and software metadata into build and deployment pipelines.