Principal Cloud Security DevOps Engineer

Bring out your best

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.  

 

 

As a Principal Cloud Security DevOps Engineer, you will: 

• Work with internal stakeholders to understand requirements and constraints.
• Develop solutions based on business needs and priorities.
• Provide technical leadership and contribute on high value SecDevOps projects and solutions.
• Develop configuration controls and automations to identify compliance gaps.
• Leverage major security frameworks to align SAP Security goals across organizations
• Identify and resolve gaps in current processes, workflows, designs, and controls.
• Solve complex problems using data driven recommendations while considering impacts on people, processes, and technology.
• Provide mentoring and contribution toward the overall growth and development of the team.
• Take ownership of assigned projects and tasks.
• Develop strategic partnerships with key decision makers across SAP.

 

What you bring:

• Mastery in at least one of the SecDevOps practices – Security as Code, CI/CD, Infrastructure as Code, Security Coding Practices, Security Governance and Compliance, modern cloud services.
• Expert in developing security controls on at least one public hyperscaler.
• 7+ years of demonstrated experience in a security engineering role working with cloud computing technologies.
• 7+ years of demonstrated experience utilizing Agile continuous improvement principles to make tangible improvements.
• Strong development background in Python, Java, or Go
• In-depth technical knowledge of cloud platforms - IBM Cloud, AWS, Azure, GCP,
• Familiar with coding change management principles and tools like Jira, Git
• Experience working on projects as part of a global team across multiple time zones.
• Expert knowledge of cloud security, vulnerability management, major security compliance and development frameworks and principles.
• Experience working with CNAPP, CWP, CSPM platforms a plus.
• Strong analytical and reasoning, problem-solving, and decision-making skills
• Experience working in a dynamic environment requiring collaboration across multiple organizations.
• Willingness to expand and grow.
• Excellent written, oral communication, and documentation skills
• Above all, you'll be a strong team player and understand that we can only succeed as a distributed team. You'll have the drive to work collaboratively and independently.

 

Meet your team:

The GCS SRRC Hyperscaler Security Engineering team works on automating and administering Hyperscaler (IBM Cloud, WS, Azure, AliCloud and GCP) security solutions. We are a geographically dispersed team who provides security configuration compliance scanning across all SAP public cloud environments. Our solutions allow SAP lines of business to increase their security by giving them critical security controls based on SGS policy. We utilize a combination of cloud native security tooling, automation, and processes to identify configuration gaps and provide actionable steps to remediate them.

 

Our team values:

• Collaboration and idea generation