Senior DevOps Security Engineer

We help the world run better

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. 

       As a Senior DevOps Security Engineer, you will be responsible for…

1. Cloud Architecture & Security: Design and implement secure, scalable cloud architectures across multiple cloud platforms (Azure, GCP, AWS, SAP Converged Cloud) ensuring best practices for data security and availability.
2. DevOps Toolchain Integration: Expertise in integrating security tools into the CI/CD pipeline using tools like Jenkins, GitLab.
3. Infrastructure as Code (IaC): Utilize IaC tools such as Terraform, CloudFormation, or Ansible to automate cloud infrastructure deployment while enforcing security policies and compliance.
4. AI/ML Model Deployment & Security: Develop and secure AI/ML pipelines for deploying models in production environments, ensuring data integrity, model security, and performance optimization. Research and develop new methods to secure AI/ML models against adversarial attacks and data poisoning.
5. Incident Response & Threat Detection: Lead incident response and threat detection efforts, utilizing SIEM tools (e.g., Splunk, ELK Stack) and machine learning models for anomaly detection and predictive threat analysis.
6. Automation & Scripting: Develop automation scripts using Python, Bash, or PowerShell for security monitoring, compliance checks, and infrastructure automation.
7. Monitoring & Logging: Implement comprehensive logging, monitoring, and alerting solutions using tools like Prometheus, Grafana, and CloudWatch for proactive system health and security monitoring.
8. Multi-Cloud Strategy & Cost Optimization: Develop and execute multi-cloud strategies, optimizing resource usage and costs while maintaining security and performance.
9. Container Security: Secure containerized environments using tools like Kubernetes, Docker, and container security platforms.
10. Vulnerability Management: Conduct regular vulnerability assessments and remediation plans for cloud resources and CI/CD pipelines using tools or open-source solutions.
11. Performance Optimization & Scalability: Ensure the performance, scalability, and reliability of infrastructure and applications in cloud environments through continuous optimization and proactive management.
12. Public Key Infrastructure (PKI) Management: Design, deploy, and manage PKI solutions to support secure communications and authentication, including certificate issuance, revocation, and renewal processes.

What you bring:

• Mastery in Security as Code, CI/CD, Infrastructure as Code, Security Coding Practices, Security Governance and Compliance, modern cloud services.
• Expert in developing security controls on at least one public hyperscaler.
• 10+ years of demonstrated experience in a security engineering role working with cloud computing technologies.
• 10+ years of demonstrated experience utilizing Agile continuous improvement principles to make tangible improvements.
• Strong development background in Python, Java, or Go
• In-depth technical knowledge of cloud platforms - IBM Cloud, AWS, Azure, GCP,
• Familiar with coding change management principles and tools like Jira, Git
• Experience working on projects as part of a global team across multiple time zones.
• Expert knowledge of cloud security, vulnerability management, major security compliance and development framew