15 days ago
Sofia, BulgariaSenior
Responsibilities
- Design, develop, and operate scalable security microservices for SAP HANA Cloud using secure-by-design and DevSecOps principles.
- Integrate automated security scanning, vulnerability management, policy enforcement, and compliance checks into CI/CD pipelines.
- Translate regulatory and internal security requirements into automated, code-driven security controls.
- Design and maintain RBAC models and authentication and authorization flows.
- Implement infrastructure-as-code and policy-as-code practices for consistent and auditable security configurations.
- Provide observability, support, and continuous improvement for deployed security services.
- Collaborate with engineering teams to embed security practices throughout the development and deployment lifecycle.
Requirements
- Proven experience developing and operating microservices in cloud-native environments using DevSecOps practices.
- Experience with CI/CD pipelines and security automation tooling such as Azure DevOps or Jenkins.
- Hands-on Kubernetes experience, including pod security policies, network policies, and secrets management.
- Experience with AWS, Azure, or GCP public cloud platforms.
- Experience with identity and access management, RBAC design, least-privilege enforcement, and secure authentication mechanisms including OAuth 2.0, OIDC, and SAML.
- Understanding of encryption, secrets management, and key rotation strategies, including tools such as HashiCorp Vault and KMS.
- Scripting experience, such as Python, for security operations, remediation workflows, and compliance reporting.
- Experience with log aggregation, observability, visualization, security monitoring, and compliance evidence platforms such as Grafana and Loki.
- Ability to collaborate across teams and drive secure engineering practices.
Benefits
- Hands-on experience with the SAP HANA Cloud technology stack, cloud technologies, secure operations, and compliance.
- Opportunity to influence architectural decisions and lead cross-project and cross-organizational initiatives.
- Mentoring, training, continuous learning, and opportunities to grow into technical leadership roles.
- Regular full-time employment with a hybrid working model and expected travel of 0–10%.
Tech Stack
Categories
About SAP
SAP builds enterprise application software and cloud services for finance, procurement, supply chain, human resources, and analytics, sold through subscriptions, licenses, and support. Its portfolio includes SAP S/4HANA, SAP Business Technology Platform, SAP Ariba, and SAP SuccessFactors. Founded in 1972 and headquartered in Walldorf, Germany, SAP is a public company listed on the NYSE and Frankfurt (ETR) and serves enterprises and public-sector organizations worldwide.