Sovereign Cloud Security Engineer Expert

SAP; Reston (VA); On-site; USD 220,200 - 374,200; Full time

Job summary

SAP is seeking a Security Engineer Expert to join the Security Engineering group in the Technology & Engineering unit as part of the Sovereign Cloud Delivery & Operations team.

You will help build and secure the Sovereign Cloud infrastructure, drive automated provisioning with Terraform and Ansible, and coordinate with global teams and hyperscaler partners to ensure secure deployment and lifecycle management.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology or Engineering or equivalent experience.
• Ability to manage through ambiguities while being innovative and collaborative.
• Ability to take a technical approach to design specifications of our large‑scale network.
• Strong analytical research and technology skills and the willingness to learn new topics quickly.
• Ability to think strategically, delivering services to meet stakeholders’ demands on a timely basis.

Responsibilities

• Lead design and deployment of secure infrastructure for Sovereign Cloud.
• Coordinate with global Sovereign Cloud operations teams and hyperscaler partners.
• Develop and automate security solutions aligned with security strategy.
• Keep knowledge base up-to-date with native hyperscaler capabilities and tools.
• Influence security deployment decisions and drive standardized processes.

Skills

Infrastructure knowledge

Security engineering

Analytical skills

Communication skills

Cross-functional collaboration

Intercultural competence

Work under pressure

Influence without authority

Stakeholder management

Education

Bachelor’s or Master’s degree in Computer Science, Information Technology or Engineering

Tools

Ansible

Terraform

CI/CD tools

Git

Kubernetes

Job description

YOUR FUTURE ROLE

We are looking for a Security Engineer Expert (f/m/d) within the Security Engineering group in the Technology & Engineering unit of the newly formed Sovereign Cloud Delivery & Operations team as part of the Customer Services & Delivery board area.

In this role you will become a founding member of the Technology and Engineering team. You will be engaging with existing infrastructure and product experts to help build up a globally distributed team of highly motivated individuals responsible for the secure deployment, upgrade and lifecycle management of the Sovereign Cloud non-production security infrastructure.

You will inspire innovation and drive execution of disciplined and standardized security processes and tools addressing mission‑critical capability gaps and opportunities for maximized efficiency. You will help identify trade‑offs in security deployment plans and any key day‑to‑day operational decisions impacting infrastructure investments significantly.

You will help the team to strengthen best practices on automated provisioning of foundational cloud infrastructure and of Sovereign Cloud ready SAP products.

You will manage development and automation of security solutions in alignment with security strategy.

You need to ensure the team’s knowledge base is kept consistently up‑to‑date with native hyperscaler capabilities and modern infrastructure management tools. Starting from this status quo, you will design security concepts for our infrastructure management on the global scale.

This will involve significant coordination with the global Sovereign Cloud operations teams and our hyperscaler provider partners.

WHAT YOU BRING

Besides that you bring:

• Bachelor’s or Master's degree in Computer Science, Information Technology or Engineering or equivalent experience.
• Ability to manage through ambiguities while being innovative and collaborative.
• Ability to take a technical approach to design specifications of our large‑scale network.
• Strong analytical research and technology skills and the willingness to learn new topics quickly.
• Ability to think strategically, delivering services to meet stakeholders’ demands on a timely basis.
• Ability to mix Open Source and Commercial technologies to achieve objectives.
• Willingness to contribute to Open Source security projects and the greater security community.
• Provision and support new and existing security cloud services through Terraform.
• Proven ability to produce documentation for processes and procedures.
• Proven ability to work and lead in cross‑architecture teams.
• Capability to influence without formal authority.
• Strong communication and interpersonal skills.
• Strong cultural awareness and intercultural competencies.
• Ability to build trusted relationships with key stakeholders.
• Persistence, self‑motivation and willingness to work under pressure.
• Proven ability to deliver against challenging timelines.

WORK EXPERIENCE

• Very good understanding of infrastructure and security related topics.
• Minimum 7 years of software development experience in all phases of SDLC, including hands‑on experience with infrastructure, application or database migration.
• Experience deploying technical infrastructure at a global scale.
• Balanced expertise in both full stack application development and infrastructure development.
• Thorough understanding of infrastructure firewalls, load balancers, storage, monitoring, security, IAM etc. and have experience with orchestration to develop a cloud solution.
• Strong experience in operating systems administration and security engineering.
• Working knowledge of Ansible, Terraform, CI/CD tools, and GIT is required.
• Working knowledge of Log Correlation, Vulnerability Management, Web Application Testing concepts is a plus.
• Familiarity with managing and securing Kubernetes environments.
• Exposure to either NIST, ISO, or other compliance frameworks.
• Experience with securing products on AWS and Azure, GCP is a plus.
• Experience with sovereign cloud is a plus.

QUALIFICATIONS AND COMPENSATION

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, etc.), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency: SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step towards demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 220200 - 374200 (USD). The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

SAP is committed to the principles of Equal Employment Opportunity and to providing reasonable accommodations to applicants with physical, sensory and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please contact us at [e-mail]. Requests for reasonable accommodation will be considered on a case‑by‑case basis.