Infrastructure Specialist AWS DevOps R - T2M296

Platform Engineer

Up to £650pd (Inside IR35)

Remote - occasional travel to London

1 Year

My client is a well-known consultancy seeking an experienced platform engineer to design, deploy, configure, and support a highly available Sonatype Nexus Repository Manager on Amazon Web Services (AWS) EC2 infrastructure. The successful candidate will have strong experience in AWS, Linux administration, automation, Infrastructure as Code (IaC), and DevOps practices to deliver a secure, scalable, and resilient Nexus platform. The role focuses on AWS infrastructure engineering, Linux systems administration, automation, security, and operational excellence.

Key Requirements:
AWS Platform Engineering

Design and deploy AWS infrastructure to host Sonatype Nexus Repository.
Provision and manage Amazon EC2 instances running Linux.
Configure VPCs, subnets, route tables, security groups, and network ACLs.
Configure Application Load Balancers (ALB) where appropriate.
Implement scalable and resilient infrastructure aligned with AWS best practices.
Configure Amazon EBS volumes for Nexus data storage.
Configure Amazon S3 for backups and artefact archival where required.
Configure Route 53 DNS records.
Implement backup, recovery, and disaster recovery procedures.
Nexus Repository Deployment

Install, configure, and administer Sonatype Nexus Repository Manager.
Configure hosted, proxy, and group repositories.
Configure repository formats including:Maven
Docker
npm
NuGet
PyPI
Raw repositories

Configure blob stores.
Implement repository cleanup and retention policies.
Configure HTTPS and SSL/TLS certificates.
Integrate Nexus with enterprise authentication services such as LDAP or Active Directory.
Perform upgrades, patching, and ongoing maintenance.
Linux Administration

Install and maintain Red Hat Enterprise Linux, Amazon Linux, or Ubuntu.
Configure storage, file systems, and system services.
Manage users, permissions, and access controls.
Troubleshoot operating system, networking, and application issues.
Optimise server performance and resource utilisation.
Automation & Infrastructure as CodeDevelop and maintain automated deployments using:

Terraform
AWS CloudFormation (desirable)
Ansible
Bash or PowerShell scripting
GitAutomate:

Infrastructure provisioning
Nexus installation and configuration
Server configuration
Backup procedures
Patch management
Disaster recovery processes
SecurityImplement AWS and Linux security best practices, including:

IAM roles and policies
Least-privilege access
AWS KMS encryption
AWS Secrets Manager or Systems Manager Parameter Store
Security Groups and network segmentation
Operating system hardening
Certificate management
Vulnerability remediation
Audit logging and compliance
Monitoring & OperationsImplement monitoring and alerting using:

Amazon CloudWatch
CloudWatch Logs
CloudTrail
AWS Config
Support:

Platform monitoring
Capacity planning
Performance tuning
Log management
Incident response
Root cause analysis
CI/CD IntegrationIntegrate Nexus with CI/CD platforms including:

Jenkins
GitHub Actions
GitLab CI
Azure DevOps
Support:

Artefact publishing
Docker image repositories
Dependency proxying
Build optimisation
Secure software supply chain practices
Essential Skills:
AWS (Primary Requirement)

Amazon EC2
IAM
VPC
Route 53
Elastic Load Balancing (ALB)
Amazon EBS
Amazon S3
CloudWatch
CloudTrail
AWS Config
Systems Manager
Secrets Manager
KMS
Security Groups
LinuxStrong administration experience with:

Red Hat Enterprise Linux
Amazon Linux
Ubuntu
Bash scripting
Systemd
Networking
Storage management
Package management
Performance tuning
Infrastructure as Code & Automation

Terraform
Ansible
Git
YAML
Shell scripting
CI/CD pipelines
Nexus Repository

Nexus Repository Manager installation and configuration
Repository administration
Blob store management
Repository cleanup policies
SSL/TLS configuration
Backup and recovery
Performance tuning
User and role administration
Desirable skills

Docker
Kubernetes (basic understanding)
HashiCorp Vault
Prometheus
Grafana
Sonatype Lifecycle (IQ Server)
Apache or NGINX reverse proxy
Enterprise identity integration (LDAP, Active Directory, SAML)

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)
Only candidates based in UK and eligible to work in UK are allowed