DevSecOps & SAP Security Compliance Engineer

Socket.dev; United States; Remote; USD 120,000 - 200,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401K

Discretionary PTO

Professional development

Collaborative work environment

Job summary

K.L. Scott & Associates is seeking a DevSecOps and Security Compliance Engineer to embed security into SAP delivery and operations for federal clients. You will improve deployment controls, identify vulnerabilities, and maintain evidence for client security reviews and authorization activities.

The role requires designing automation for SAP deployments, integrating security checks into pipelines, and coordinating access controls and audit logs across teams. Federal program experience is valued.

Qualifications

• Bachelor's degree in Computer Science or equivalent.
• Five+ years experience on SAP platform.
• Ten+ years of relevant experience.
• Experience supporting federal government programs.
• Experience with CI/CD pipelines, scripting, vulnerability management, and SAP security.

Responsibilities

• Develop and maintain automation for builds, testing, security checks, and controlled SAP deployments.
• Integrate code, dependency, configuration, and vulnerability checks into development and release workflows.
• Coordinate access controls, secrets management, secure configurations, and audit logging with technical teams.
• Assess findings, prioritize remediation, validate fixes, and track outstanding security risks.
• Maintain security documentation and control evidence for client reviews and authorization activities.
• Support monitoring, incident response, and release approvals per client requirements.

Skills

SAP security

CI/CD pipelines

Scripting

Vulnerability management

Federal security processes

Configuration management

Education

Bachelor's degree in CS or equivalent

Tools

SAP SLcM

Job description

K.L. Scott & Associates is seeking a DevSecOps and Security Compliance Engineer to embed security into SAP delivery and operations for federal clients. You will improve deployment controls, identify vulnerabilities, and maintain evidence for client security reviews and authorization activities.

The role requires designing automation for SAP deployments, integrating security checks into pipelines, and coordinating access controls and audit logs across teams. Federal program experience is valued.