SAP BTP DevOps Engineer: CI/CD, Security & Cloud Foundry

EPAM Systems

Mexico

On-site

PHP 5,643,000 - 9,404,000

Full time

2 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Healthcare benefits

Learning & certification programs

Global career opportunities

Job summary

EPAM Systems is seeking a SAP BTP DevOps Engineer to manage CI/CD pipelines, environment health, deployments, and security compliance for SAP BTP Cloud Foundry applications across DEV, QA, and PROD landscapes. You will optimize release processes and maintain parity across environments as part of a global delivery team.

The role requires 3+ years in DevOps with SAP BTP, Jenkins, and strong knowledge of security tooling and artifact management.

Qualifications

3+ years of experience in DevOps or platform engineering roles with SAP BTP.
Expertise in SAP BTP Cloud Foundry, including subaccount administration, CF CLI, and MTA build and deployment.
Proficiency in Jenkins CI/CD pipeline management, including Jenkinsfile configuration and build/deploy/security stages.
Knowledge of XSUAA and SAP IAS, including certificate rotation, trust configuration, and token validation.
Background in SAP HANA Cloud HDI container lifecycle and deployment artifact management.
Skills in SAP Credential Store secrets management and rotation on a maximum 90-day cycle.
Familiarity with security gate tools such as SonarQube, Mend/WhiteSource, Checkmarx, and Fortify.
Understanding of Git-based version control and branching strategies for multi-landscape environments.
Experience managing DEV/QA/PROD landscape parity and release coordination.
Exposure to regulated or enterprise clients such as pharma, energy, or government.
English proficiency (B2+) for technical documentation and client communication.

Responsibilities

Maintain Jenkins CI/CD pipelines, ensuring build, security scan, and deploy stages succeed.
Ensure DEV/QA/PROD landscape parity, service health, and entitlement compliance.
Monitor and rotate XSUAA certificates, Credential Store secrets, and API keys before expiration thresholds.
Triage findings from security gate tools and coordinate CVE remediation with the development team.
Execute and validate deployments across landscapes with rollback capability.
Resolve pipeline incidents within SLA windows.
Coordinate release management across multiple environments.
Produce weekly environment health check summaries for the project lead.
Generate remediation reports per release cycle.
Maintain deployment logs per change request.
Manage version-controlled MTA/mta.yaml and manifest.yml configurations.
Monitor SAP Cloud Logging and Alert Notification Service for proactive issue detection.