Platform Engineer - CICD

Platform Engineer – CICD

Keep the platform behind the platform secure, efficient, and fast

How do you make our customers happy?

By ensuring every bol engineer can build, test, and ship software securely and efficiently. Team CICD provides the software delivery platform that hundreds of engineers across Product & Tech rely on. When our platform runs well, other teams can ship with confidence. When it doesn’t, nothing ships. Together with your colleagues you’ll operate and improve the CICD ecosystem that underpins bol’s ability to serve 13.7 million customers and 47,000 partners. That ecosystem centers on two main components: a self-managed GitLab Enterprise instance hosted on GKE (with over a thousand users) and Artifactory, an artifact repository that supports all of our build and deployment workflows.

The biggest challenge

Balancing reliability, security, and a superb developer experience at scale. The engineers who depend on your platform need it to be fast and frictionless. Compliance and security teams need it to be airtight. Finance needs it to be cost-efficient. And you have to keep it running smoothly. How can you implement secure supply chain practices – SBOM generation, vulnerability scanning, secret scanning – without slowing down the teams that depend on your pipelines? How can you maximize performance and minimize cloud costs across a high-load environment? And how can you evolve a mature platform incrementally when tempted to rebuild from scratch? This role requires the discipline to improve what works, the judgment to know what to change, and the resilience to keep a mission-critical system running.

What you’ll do as a Platform Engineer: CICD

You’ll join a team of seven colleague platform engineers, a product manager, and an engineering manager. The team operates with “freedom within a framework”, so you’ll have the autonomy to shape solutions, influence the architecture, and drive improvements. Your day-to-day spans maintaining, optimizing, and securing bol’s CICD ecosystem.

On the GitLab side, you’ll manage and maintain everything from source code management and CI/CD pipelines (both managed and unmanaged) to security scanning (SAST, DAST, secret scanning), SBOM generation, runner infrastructure and scaling, and DORA metrics exports. On the Artifactory side, you’ll own the repository structure and lifecycle policies, storage optimization, security and compliance controls, and integration with GitLab pipelines and deployment tooling. Across both platforms, you’ll monitor performance, cloud costs, and usage patterns to ensure reliability and efficiency. Here’s what that looks like in practice:

• Operate, evolve, and optimize bol’s GitLab and Artifactory platforms, including performance tuning, scaling, and cost management
• Implement and maintain secure software supply chain practices: SBOM, vulnerability scanning, secret scanning, and compliance workflows
• Support managed and unmanaged CI/CD pipelines across the engineering organization
• Contribute to architectural discussions on scalability, resilience, data retention, and cost trade-offs
• Improve the internal developer experience by simplifying workflows, reducing friction, and enabling teams to ship faster and more securely
• Participate in the on-call rotation (business hours) to resolve platform-level incidents and assist engineering teams

Why you can make a difference

You have hands-on experience with the technologies that make up our stack. GitLab (self-managed, enterprise) and Artifactory are the core. If you’ve operated either at scale, you know what this role entails. You’re comfortable with Kubernetes (GKE), cloud infrastructure (GCP preferred; AWS/Azure experience is also valuable), and Linux (RedHat, Debian-based). You write Python for scripting and application development, and you have solid experience with CI/CD pipeline tooling, automation frameworks, and security scanning tools (SAST, DAST, SBOM, secret scanning). You think in terms of platform health: reliability, performance, security, and cost efficiency should be balanced. You like to liaise with engineering teams that depend on your platform, and contribute to a team culture where knowledge sharing, collaborative problem-solving, and continuous improvement are the norm.

3 reasons why this is (not) for you

• Greenfield explorer Our focus is on operating and improving a mature CICD platform at enterprise scale, not building a new one from scratch
• Fail-fast fanatic You are only energized by shipping new features at speed. Sustainable platform health? An afterthought at best.
• Breadth browser You want a role that spans many domains and cloud disciplines. GitLab, Artifactory, Kubernetes and GCP are nice, but not enough.

• Scale operator You’re eager to support mission-critical developer tooling used by hundreds of engineers across Product & Tech. Designing for reliability, performance, and cost efficiency? Definitely!
• Mature platform steward You appreciate working with proven technologies and improving them, balancing innovation with stability, compliance, and security
• DX driven You look forward to building tools and workflows that facilitate and inspire engineers

Where you’ll work

You’ll join Team CICD within bol’s Product & Tech organization. The team is collaborative, pragmatic, and enjoys working, growing, and laughing together. The environment values operational excellence, clear communication, and the kind of quiet craftsmanship that keeps a high-load, high-visibility system running smoothly. If you want to work on infrastructure that hundreds of engineers depend on every day and take pride in the fact that the best compliment is when nobody notices your work, welcome on board!