SAP NS2 Sr Security Automation Engineer

SAP; Herndon (VA); On-site; USD 131,000 - 272,000; Full time

Job summary

SAP NS2 is seeking an experienced Security Automation Engineer to architect, configure, and maintain automation tooling for the Enterprise Security team. You will design IaC, deploy microservice architectures across AWS, Google Cloud, and Azure, and enforce Kubernetes security best practices.

The role requires hands-on experience with cloud security tooling, logging pipelines, and CI/CD pipelines. U.S. citizenship and the ability to work on-site are expected for this position.

Qualifications

• BS degree in Computer Science, MIS, Computer Engineering or 10+ years of equivalent experience
• 3+ years’ experience administering Kubernetes clusters on cloud platforms
• 3+ years’ experience building scalable security utilities and tools
• 3+ years’ experience in host, network, and application security
• 5+ years’ experience with web protocols and Linux/Unix tools and architecture
• 5+ years’ hands-on experience building and administering AWS workloads

Responsibilities

• Develop and maintain infrastructure-as-code (IaC) using Terraform, Helm, or Ansible
• Design, implement, and manage microservice system architectures on cloud platforms (AWS, Google Cloud, Azure)
• Implement Kubernetes security best practices, including IAM integration, secrets management, and network policies
• Troubleshoot and resolve issues related to container orchestration and cloud networking across providers
• Architect, develop, and maintain distributed logging pipelines using AWS Lambda, Kinesis, Vector, and Splunk
• Automating builds and configurations of security tooling infrastructure using CI/CD tools like ArgoCD, Concourse, and GitHub Actions

Skills

IaC concepts

Security automation

Kubernetes security

Cloud platforms

CI/CD practices

Education

BS in CS / MIS / Comp Eng

Tools

Terraform

Helm

Ansible

Kubernetes

AWS

GCP

Azure

AWS Lambda

Kinesis

Vector

Splunk

ArgoCD

Concourse

GitHub Actions

Job description

We help the world run better At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

COMPANY DESCRIPTION

SAP is the global market leader for business software and related services. SAP National Security Services Inc.® (SAP NS2®) is an independent U.S. subsidiary of SAP. At SAP NS2, we leverage best-in-breed technologies engineered by SAP to protect the lives, assets and information of Americans. We offer SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers.

Must be a US Citizen; this position requires access to customer data. All internals must have Manager’s approval to transfer.

NS2 Security Automation Engineers provide technical leadership and guidance on security automation and secure system engineering topics to both internal and external teams and are responsible for architecting, configuring, and maintaining automation tooling and pipelines for the Enterprise Security team.

Key Responsibilities:

• Develop and maintain infrastructure-as-code (IaC) using tools such as Terraform, Helm, or Ansible
• Design, implement, and manage microservice system architectures on cloud platforms including Amazon EKS/ECS, Google GKE, and Azure AKS to ensure high availability, scalability, and performance
• Implement Kubernetes security best practices, including IAM integration, secrets management, and network policies
• Troubleshoot and resolve issues related to container orchestration, cloud networking (VPCs, load balancers), and resource allocation across cloud providers and security boundaries
• Architect, develop, and maintain distributed, scalable logging pipelines using tools such as AWS Lambda, Kinesis, Vector, and Splunk
• Automating builds and configurations of security tooling infrastructure using CI/CD pipeline tools such as ArgoCD, Concourse, and GitHub Actions

Minimum Qualifications:

• BS degree in Computer Science, MIS, Computer Engineering, or 10+ years' equivalent technology experience
• 3+ years’ experience administering Kubernetes clusters on cloud platforms
• 3+ years’ experience building scalable security utilities and tools
• 3+ years’ experience in host, network, and application security
• 5+ years’ experience with web protocols and Linux/Unix tools and architecture
• 5+ years’ hands‑on experience building and administering AWS workloads

Preferred Qualifications:

• Effective communication and collaboration skills
• Continuous learning mindset to stay current with the tools and the rapidly evolving cyber threat landscape
• Motivated with a positive attitude and a strong bias towards taking corrective action and providing resolutions
• Experience using automation tools such Ansible and Terraform
• Experience designing, implementing, or administering microservice system architectures such as Kubernetes
• Exprerience leveraging LLMs to cond uct and validate technical work
• Experience with CI/CD technologies
• Expertise in log management and parsing strategies

Candidates with the following relevant certifications and experience will be given preferential consideration:

• AWS/Azure/GCP Cloud Provider Certifications
• CKA/CKS/CKAD
• Prior DOD/FedRAMP experience
• Experience with distributed log collection architectures

Bring out your best

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion

SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency: SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step towards demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted annual combined range for this position is 131000-271600USD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Employment Type: Regular Full Time

Expected Travel: 0 - 10%

Career Status: Professional

Work Area: Information Technology

Additional Locations: #LI-Hybrid