17 hours ago
Prague, CzechiaSenior
Responsibilities
- Lead the design, automation, operation, and continuous evolution of SAP’s Privileged Access Management platform across multi-cloud and enterprise environments.
- Develop deployment, upgrade, staged-release, rollback, and lifecycle-management strategies for platform components.
- Design and maintain GitHub Actions CI/CD pipelines and infrastructure-as-code workflows.
- Implement observability, monitoring, logging, alerting, reliability improvements, incident response, root cause analysis, and post-incident actions.
- Design and implement autonomous and agentic AI solutions, AI-augmented engineering, intelligent workflow automation, context engineering, and AI quality governance.
- Champion automation-first and security-first operational practices, including policy as code and automated workflows.
- Partner with product engineering teams to improve reliability, deployment models, and scalability.
- Mentor engineers and lead cross-functional technical initiatives within security and platform engineering teams.
- Support security reviews, certificate and credential lifecycle automation, and compliance with access-control standards.
- Participate in an on-call rotation and troubleshoot production incidents.
Requirements
- 8+ years of experience in DevOps, platform engineering, cloud infrastructure, or a related field, with enterprise-scale delivery experience.
- Expertise architecting automation and platform delivery across multi-cloud environments, including deep expertise in AWS, Azure, or GCP.
- Advanced knowledge of containerization and Kubernetes, including architecture, networking, storage, security, and operations.
- Ability to design and build agentic AI solutions and AI-driven automation.
- Deep experience designing and optimizing reliable CI/CD pipelines and multi-environment deployment workflows.
- Proficiency with Terraform, Crossplane, and Ansible for infrastructure as code and configuration management.
- Strong scripting and programming skills with Python, PowerShell, or Bash.
- Experience with Grafana, Dynatrace, Splunk, or equivalent observability tooling.
- Experience using LLMs, AI-assisted coding, and AI-Ops tooling in daily engineering work.
- Experience mentoring engineers and leading cross-functional technical initiatives in security or platform engineering.
- Experience with CIS Benchmarks, STIG, SOC 2, PCI, SEC.309, and OWASP Top 10 compliance and security frameworks.
- Strong written communication skills for architecture decision records, threat models, postmortems, and security documentation.
- Expertise managing, deploying, and securing Windows and Linux environments at scale.
- SAP BTP Kyma, Cloud Foundry operations, and RabbitMQ experience are nice to have.
Benefits
- Flexible working models and a globally distributed team environment.
- Health and well-being support, inclusion initiatives, accessibility accommodations, and personal development opportunities.
- Regular full-time employment with expected travel of 0–10%.
- Hybrid work arrangement indicated by the #LI-Hybrid designation.
Tech Stack
AnsibleAWSAzureBashGitHub ActionsGoogle Cloud PlatformGrafanaKubernetesLinuxPowerShellPythonRabbitMQSplunkTerraformWindows
Categories
About SAP
SAP builds enterprise application software and cloud services for finance, procurement, supply chain, human resources, and analytics, sold through subscriptions, licenses, and support. Its portfolio includes SAP S/4HANA, SAP Business Technology Platform, SAP Ariba, and SAP SuccessFactors. Founded in 1972 and headquartered in Walldorf, Germany, SAP is a public company listed on the NYSE and Frankfurt (ETR) and serves enterprises and public-sector organizations worldwide.