DevOps Engineer – JFrog / Artifactory
Summary
6-month contract (Inside IR35, starting Oct 2026, possible extension) DevOps/DevSecOps engineer working with Deloitte Operations on a client programme in London (hybrid, 3-4 days on client site). Day to day: implementing and optimising security scanning and controls in CI/CD pipelines, centered on JFrog Artifactory/Xray, SonarQube, SBOM generation, Bitbucket governance, and container image securit
Role: DevOps Engineer – JFrog /
Artifactory - Please note candidates must already have the right to work in the UK without Sponsorship
Location: London – Hybrid Model 3 to 4 days on client
site
Start Date: October 2026
End Date: 6 months to start with
possible extension
Daily Rate: Inside IR35
Payroll
provider – Rockford Payroll Info for Contingent Workers
– Rockford Pay
This is an exciting opportunity to join Deloitte
Operations for an engagement with one of our clients.
The Role
We’re looking for an experienced DevSecOps / DevOps Engineer to support
a major programme focused on strengthening security and vulnerability management across
application deployment lifecycles.
The role will involve implementing and optimising security scanning and
controls within CI/CD pipelines, with a particular focus on JFrog Artifactory
and application security tooling.
Experience
& Skills Required
· Strong hands-on DevOps /
DevSecOps engineering experience
· Strong JFrog Artifactory
experience, ideally including implementation/configuration rather than solely
end-user experience
· JFrog Xray / Artifactory
Curation experience highly desirable
· Experience implementing
vulnerability and security scanning within application deployment pipelines
· SonarQube / SonarQube
Advanced Security experience
· Strong knowledge of CI/CD
pipelines and embedding security controls throughout the software delivery
lifecycle
· Experience with SBOM
(Software Bill of Materials) generation
· Bitbucket experience,
including branch protection and pull-request controls
· Understanding of
container/image security and secure management of external binaries and images
· Experience with Cosign /
container image signing would be advantageous
This would suit an engineer with a strong DevOps background who has
moved heavily into DevSecOps, application security and secure software
delivery.