Expert DevOps Engineer - Security Tools Team

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

We are looking for an Expert DevOps Engineer to lead the design, operation, and continuous evolution of SAP's Privileged Access Management (PAM) platform. You will provide expert technical leadership, drive agentic-first solutions, operational excellence, and platform reliability across SAP's enterprise environments.

What you'll build

• Lead the design, automation, and operation of the PAM platform ensuring consistent and reliable privileged access management at scale across multiple cloud environments, and enterprise infrastructure.
• Guide and enhance deployment and upgrade strategies for platform components, ensuring zero-downtime rollouts, controlled staged releases, and rapid rollback capability
• Design, and implement CI/CD pipelines and release workflows using GitHub Actions to deliver platform changes reliably and consistently across all environments
• Architect, implement and maintain infrastructure as code for provisioning, configuration, and lifecycle management of platform components across environments
• Spearhead observability and reliability engineering initiatives, implementing advanced monitoring, logging, and alerting solutions while improving service performance, accelerating incident resolution, and reducing operational toil through automation.
• Define and execute the vision for advanced AI engineering capabilities, leading the design and implementation of autonomous and agentic AI solutions, AI-augmented software engineering, intelligent workflow automation, Context Engineering, and AI quality governance. Enable enterprise-wide AI adoption by establishing standards, reusable frameworks, and operational models that deliver scalable, secure, and high-impact business transformation.
• Champion an Automation-First and Security-First mindset, leveraging infrastructure as code, policy as code, and automated operational workflows to improve reliability, reduce manual effort, strengthen security posture, and standardize platform operations
• Participate in an on-call rotation; troubleshoot production incidents, perform root cause analysis, and drive post-incident improvements
• Partner with product engineering teams to improve platform reliability, deployment models, and operational scalability

What You Bring

• 8+ years of experience in DevOps, platform engineering, cloud infrastructure, or a related field, with a demonstrated track record of delivering at enterprise scale
• Demonstrated expertise in architecting and leading complex automation and platform delivery initiatives at scale across multi-cloud and enterprise environments, with deep expertise in at least one major cloud provider (AWS, Azure, or GCP)
• Advanced expertise in containerization and Kubernetes technologies, including architecture, networking, storage, security, and operational best practices.
• Ability to design and build agentic AI solutions and AI-driven automation.
• Deep experience designing and optimizing robust CI/CD pipelines and release workflows, with a focus on automation, reliability, compliance, and multi-environment deployment strategies
• Proficiency with Infrastructure as Code and Configuration Management tools (Terraform, Crossplane, Ansible)
• Strong scripting and programming skills (Python, PowerShell, or Bash) for automation, platform integration, and operational tooling
• Practical experience in observability tooling (Grafana, Dynatrace, Splunk, or equivalent) and experience defining and supporting monitoring and alerting for production systems
• Expert in the use AI tools (LLMs, AI-assisted coding, AI-Ops tooling) as a core part of day-to-day engineering work
• Demonstrated experience mentoring engineers and leading cross-functional technical initiatives within security or platform engineering teams
• Experience in compliance, governance, and security frameworks: CIS Benchmarks, STIG, SOC 2, PCI, SEC.309, and OWASP Top 10
• Excellent written communication: ability to author and review architecture decision records, threat models, postmortems, and security review documentation; able to influence stakeholders without direct authority
• Advanced problem-solving skills, ownership mindset, and ability to operate effectively in fast-paced globally distributed environment
• Expert knowledge managing, deploying, and securing Windows and Linux environments at scale.

Nice to have

• SAP BTP Kyma and Cloud Foundry operations experience
• Experience with messaging and event streaming platforms such as RabbitMQ

Where you belong

You will be part of a globally distributed security engineering team driving the automation and operational excellence of SAP's Privileged Access Management platform across enterprise cloud environments.

This role combines advanced cloud automation engineering with a strong security and DevOps mindset. You will design and implement security tools using modern cloud-native technologies, build and maintain CI/CD pipelines, manage infrastructure-as-code, and develop tooling that reduces operational toil across the PAM platform. You will also guide security review processes, enhance certificate and credential lifecycle automation, and strengthen compliance with SAP's security and access control standards across multiple cloud environments.

Driven by curiosity, ownership, and a passion for innovation, you will challenge existing processes, champion best practices, mentor others through your expertise, and continuously improve the platform's security, scalability, and operational maturity.

Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: [email protected].

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.

Successful candidates might be required to undergo a background verification with an external vendor.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 460057 | Work Area: Software-Development Operations | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid