(Senior) IT Risk Specialist - Secrecy IT Infrastructure (SITI) (f/m/d)

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed. 

 

 

What you’ll build

 

SAP SS&D (Sovereign Services & Delivery) is looking for an IT Risk Specialist – Secrecy IT Infrastructure (SITI) (f/m/d) to operate and further develop the SITI infrastructure at our Walldorf location.

 

In this role, you will be responsible for the secure operation and risk-compliant management of the local SITI environment, including the on-site Micro Data Center. This includes managing and maintaining the hardware infrastructure, performing preventive maintenance and troubleshooting, and applying regular updates and security patches to ensure a compliant and stable system landscape. You will also be responsible for the provisioning, rollout, and support of VS-TOPS (classified client systems) at the site.

Your tasks will involve both strategic and hands-on responsibilities: from installing and configuring systems, virtualization, and hardware lifecycle management, to ensuring compliance with relevant IT security, physical protection, and regulatory requirements—especially in the context of German classified environments (VS-NfD).

You will support and further develop key infrastructure components, contribute to continuous improvements, and serve as the primary contact for all SITI-related operations at the Berlin site. Your work directly supports secure development and delivery capabilities for public sector and regulated industry customers, helping SAP meet the highest confidentiality and compliance standards.

Your primary responsibilities will include:

 

• Operating and extending technical and structural infrastructure components for highly secure environments, both for internal platforms and customer-facing projects
• Supporting security accreditation processes and administrating relevant systems and security technologies
• Providing technical support for SAP processes related to the protection of government-classified information, with a focus on upholding permanent confidentiality
• Acting as the local SITI contact and coordinating liaison with external IT service providers and technology partners
• Managing secure IT operations in close alignment with central SAP SS&D operations, especially for externally operated systems and providers in Walldorf and Berlin
• Administration and maintenance of virtualized environments (VMS) and support in setting up new virtual machines for classified operations
• Operation and management of Active Directory components and secure identity/access controls
• Managing backup and recovery operations using VEEAM to ensure high availability and data integrity
• Handling IT asset management, including lifecycle tracking and compliance for all secure devices
• Provisioning and support of VS-TOPS (classified laptops) for users, including onboarding, maintenance, and troubleshooting
• Working with SIEM systems, ideally Splunk, to analyze logs, detect anomalies, and support incident response
• Administration and management of ECOS PKI/SMA appliances, ECOS Secure BootSticks
• Supporting the mitigation of IT security incidents and helping the business fulfill governmental regulatory requirements
• Enabling classified development projects by ensuring secure environments according to national and international secrecy requirements
• Starting your career in SAP SS&D by learning and applying the strict requirements for handling customer secrecy information, in collaboration with government authorities (e.g. multi-/bilateral agreements and process handling)

 

What you bring

 

You are a committed and proactive IT risk specialist with a strong background in secure infrastructure operations and classified environments. Your profile should demonstrate experience in several of the following areas:

<