Job Title: Platform Engineer – Enterprise Golden Paths & Automated Governance
GCL: E
Introduction to role:
Are you ready to define enterprise golden paths that make secure, high‑quality delivery the default and accelerate impact for patients? Do you want to turn platforms like JFrog Artifactory, JFrog Xray, and SonarQube into frictionless, self‑service capabilities that thousands of engineers rely on every day?
In this role, you will be the driving force behind our developer tooling strategy for artifact management, vulnerability intelligence, and static code analysis. You will connect engineering, security, and compliance to deliver automated governance that scales, enabling teams to ship reliable software faster while meeting the rigorous expectations of our industry. Your work will codify guidelines into reusable patterns, unlock measurable gains in developer efficiency, and reduce risk throughout our software delivery ecosystem.
You will operate with real ownership: translating enterprise priorities into a clear roadmap, turning insights into delivery, and making adoption the north star. Empowered to innovate accurately, you’ll build solutions that prioritize developers, lead with APIs, and ensure resilience. This lets our teams focus on developing medicines and solutions that change lives.
Accountabilities:
- Product Strategy and Roadmap: Define and evolve the vision for artifact handling, threat intelligence, and static code scanning platforms, aligning to enterprise objectives for software supply chain security, software quality, and improving developer efficiency. Sequence near‑term deliverables and long‑term maturity, emphasizing developer‑first design, automation, and API‑led integration.
- Platform Ownership and Prioritization: Lead the platform backlog across enhancements, integrations, upgrades, lifecycle, policy changes, and user experience. Write clear epics, features, and acceptance criteria that enable efficient, predictable delivery. Balance security and compliance with engineering efficiency and reliability to drive the highest value outcomes.
- Golden Paths and Automated Governance: Encode secure‑by‑default practices into self‑service golden paths, templates, and policies integrated into CI/CD. Leverage JFrog Xray and SonarQube quality gates to carry out proportionate, scalable controls without blocking developer flow.
- Adoption and Developer Experience: Treat adoption and effective usage as core success metrics. Remove friction in onboarding, repository provisioning, artifact consumption, code scanning, and remediation workflows. Use feedback, communities of practice, and usage telemetry to iterate rapidly and improve day‑to‑day developer experience.
- Stakeholder Alignment and Change Management: Serve as the primary interface across Platform Engineering, Application Security, Compliance, Enterprise Architecture, and Development Teams. Translate challenging priorities into pragmatic product decisions and scalable policy outcomes. Plan and complete communications and transition efforts for upgrades, governance updates, and deprecations to minimize disruption .
- Security, Compliance, and Governance Alignment: Embed DevSecOps principles and secure‑by‑design expectations into delivery workflows. Partner with security and compliance to implement effective controls for artifact governance, vulnerability management, software composition analysis, static code analysis, and policy enforcement.
- Metrics and Continuous Improvement: Define and track product, adoption, and experience metrics such as repository coverage, onboarding lead time, remediation cycle time, quality gate compliance, platform usage, and internal happiness. Use data and qualitative insights to guide prioritization and demonstrate value to stakeholders.
Essential Skills/Experience:
- Confirmed experience in a Product Owner, Product Manager, or similar product leadership role supporting technical platforms, developer tooling, infrastructure, or DevSecOps capabilities.
- Strong understanding of the software development lifecycle, including CI/CD, artifact repositories, vulnerability management, code quality tooling, and engineering workflow integration.
- Experience working with enterprise platforms such as JFrog Artifactory, JFrog Xray, SonarQube, or comparable tools supporting the governance of application delivery pipelines and code quality management.
- Demonstrated experience in backlog ownership, roadmap planning, collaborator management, Agile delivery, and prioritization in a sophisticated enterprise environment.
- Ability to work effectively across matrixed teams and influence outcomes without direct authority.
- Strong interpersonal skills with the ability to translate technical, operational, and compliance needs into clear product direction and actionable backlog items.
Desirable Skills/Experience:
- Experience in enterprise-scale platform environments supporting large engineering communities.
- Familiarity with DevSecOps practices such as SAST, SCA, SBOM, open-source vulnerability management, OWASP, and assurance of the software delivery pipeline.
- Experience in supervised environments and familiarity with engineering practices dedicated to meeting standards.
- Knowledge of self-service platform patterns, API-led integration, automation, and developer experience improvement approaches.
When we put unexpected teams in the same room, we unleash bold thinking with the power to encourage life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions. That's why we work, on average, a minimum of three days per week from the office. But that doesn't mean we're not flexible. We balance the expectation of being in the office while respecting individual flexibility. Join us in our outstanding and ambitious world.
Why AstraZeneca:
Here, technology is a force multiplier for science. You will join a community of specialists who connect across fields to turn sophisticated data and engineering challenges into practical outcomes that help bring medicines to patients faster. We combine ambitious goals with high ethical standards, valuing kindness alongside ambition, and we back our teams with the autonomy to innovate while doing things the right way. You will collaborate with leading authorities, shape modern platforms at enterprise scale, and see your work translate into real‑world impact.
Own the golden paths and automated governance that power secure, high‑quality software at scale—step forward and shape what comes next!
Date Posted
17-Jul-2026
Closing Date
06-Aug-2026
AstraZeneca embraces diversity and equality of opportunity. We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills. We believe that the more inclusive we are, the better our work will be. We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics. We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.
