SAP BTP DevOps Engineer

EPAM Systems; Mexico; On-site; PHP 5,643,000 - 9,404,000; Full time

Benefits offered by this job

Healthcare benefits

Learning & certification programs

Global career opportunities

Job summary

EPAM Systems is seeking a SAP BTP DevOps Engineer to manage CI/CD pipelines, environment health, deployments, and security compliance for SAP BTP Cloud Foundry applications across DEV, QA, and PROD landscapes. You will optimize release processes and maintain parity across environments as part of a global delivery team.

The role requires 3+ years in DevOps with SAP BTP, Jenkins, and strong knowledge of security tooling and artifact management.

Qualifications

• 3+ years of experience in DevOps or platform engineering roles with SAP BTP.
• Expertise in SAP BTP Cloud Foundry, including subaccount administration, CF CLI, and MTA build and deployment.
• Proficiency in Jenkins CI/CD pipeline management, including Jenkinsfile configuration and build/deploy/security stages.
• Knowledge of XSUAA and SAP IAS, including certificate rotation, trust configuration, and token validation.
• Background in SAP HANA Cloud HDI container lifecycle and deployment artifact management.
• Skills in SAP Credential Store secrets management and rotation on a maximum 90-day cycle.
• Familiarity with security gate tools such as SonarQube, Mend/WhiteSource, Checkmarx, and Fortify.
• Understanding of Git-based version control and branching strategies for multi-landscape environments.
• Experience managing DEV/QA/PROD landscape parity and release coordination.
• Exposure to regulated or enterprise clients such as pharma, energy, or government.
• English proficiency (B2+) for technical documentation and client communication.

Responsibilities

• Maintain Jenkins CI/CD pipelines, ensuring build, security scan, and deploy stages succeed.
• Ensure DEV/QA/PROD landscape parity, service health, and entitlement compliance.
• Monitor and rotate XSUAA certificates, Credential Store secrets, and API keys before expiration thresholds.
• Triage findings from security gate tools and coordinate CVE remediation with the development team.
• Execute and validate deployments across landscapes with rollback capability.
• Resolve pipeline incidents within SLA windows.
• Coordinate release management across multiple environments.
• Produce weekly environment health check summaries for the project lead.
• Generate remediation reports per release cycle.
• Maintain deployment logs per change request.
• Manage version-controlled MTA/mta.yaml and manifest.yml configurations.
• Monitor SAP Cloud Logging and Alert Notification Service for proactive issue detection.

Skills

DevOps expertise

English proficiency

Release coordination

Security awareness

Tools

SAP BTP Cloud Foundry

Jenkins CI/CD

XSUAA / SAP IAS

HANA Cloud HDI

SAP Credential Store

Security gate tools (SonarQube, Mend/WhiteSource, Checkmarx, Fortify)

Git version control

MTA / manifest.yml

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a SAP BTP DevOps Engineer to manage CI/CD pipelines, environment health, deployments, and security compliance for SAP BTP Cloud Foundry applications, operating and maintaining the delivery pipeline and platform for Aptiv Global Operations across DEV, QA, and PROD landscapes.

Responsibilities

• Maintain and troubleshoot Jenkins CI/CD pipelines, ensuring successful build, security scan, and deploy stages
• Ensure DEV/QA/PROD landscape parity, service instance health, and entitlement compliance
• Monitor and rotate XSUAA certificates, Credential Store secrets, and API keys before expiration thresholds
• Triage findings from security gate tools and coordinate CVE remediation with the development team
• Execute and validate deployments across landscapes with rollback capability
• Resolve pipeline incidents within SLA windows
• Coordinate release management across multiple environments
• Produce weekly environment health check summaries for the project lead
• Generate remediation reports per release cycle
• Maintain deployment logs per change request
• Manage version-controlled MTA/mta.yaml and manifest.yml configurations
• Monitor SAP Cloud Logging and Alert Notification Service for proactive issue detection

Requirements

• Minimum 3 years of experience in DevOps or platform engineering roles with SAP BTP
• Expertise in SAP BTP Cloud Foundry, including subaccount administration, CF CLI, and MTA build and deployment
• Proficiency in Jenkins CI/CD pipeline management, including Jenkinsfile configuration and build/deploy/security stages
• Knowledge of XSUAA and SAP IAS, including certificate rotation, trust configuration, and token validation
• Background in SAP HANA Cloud HDI container lifecycle and deployment artifact management
• Skills in SAP Credential Store secrets management and rotation on a maximum 90-day cycle
• Familiarity with security gate tools such as SonarQube, Mend/WhiteSource, Checkmarx, and Fortify
• Understanding of Git-based version control and branching strategies for multi-landscape environments
• Experience managing DEV/QA/PROD landscape parity and release coordination
• Exposure to regulated or enterprise clients such as pharma, energy, or government
• English proficiency (B2+) for technical documentation and client communication

Nice to have

• Familiarity with SAP Job Scheduling Service monitoring and alerting
• Experience with Neo to Cloud Foundry migration tooling
• Knowledge of Kyma runtime
• Skills in SAP Build Work Zone deployment and SAP Integration Suite pipeline integration
• Familiarity with SAP CIS or CAE delivery methodology
• Portuguese speaking proficiency
• Brazil-based location

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.