SIEM & Cloud Automation Engineer

SAP SE; Herndon (VA); Hybrid; USD 131,000 - 272,000; Full time

Job summary

SAP NS2 Technical Contributor / Application Administrator role in the United States focuses on managing production SIEM data platforms, onboarding data, access control, and capacity tasks within a federated security environment.

The position emphasizes automation, REST API fluency, Git-driven configurations, and strong Linux skills, with documentation and end-to-end ownership in a security-conscious, hybrid work setting in the DC area.

Qualifications

• U.S. citizenship. Work is performed in a federally controlled environment.
• Hands-on production administration of a SIEM or large-scale data platform — Splunk, Elastic, Microsoft Sentinel, Chronicle, QRadar, or comparable — including data onboarding, access administration, and capacity management.
• Demonstrated automation of administrative work: scripting in Python, PowerShell, or Bash, and configuration management such as Ansible, applied to real production tasks. Be prepared to describe specific manual processes you replaced and what that saved.
• Working fluency with platform REST APIs for bulk auditing, configuration, and tooling.
• Git and version-controlled configuration, including experience deploying platform configuration or content through an automated pipeline.
• Strong query skills in at least one platform language (SPL, KQL, Lucene or ES DSL, or SQL), with specific before and after performance results the candidate can describe.
• Linux administration fundamentals: services, filesystems, networking, TLS, and log troubleshooting.
• Excellent written documentation skills. Be prepared to provide a writing sample such as a runbook, design document, or migration plan you authored.
• Demonstrated change management discipline and the ability to own a workstream end to end with little oversight.

Skills

SIEM administration

Automation scripting

REST APIs

Git / version control

Query languages

Linux administration

Documentation

Change management

Tools

Splunk

Ansible

Terraform

AWS

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

Job description

SAP NS2 Technical Contributor / Application Administrator role in the United States focuses on managing production SIEM data platforms, onboarding data, access control, and capacity tasks within a federated security environment.

The position emphasizes automation, REST API fluency, Git-driven configurations, and strong Linux skills, with documentation and end-to-end ownership in a security-conscious, hybrid work setting in the DC area.