Expert DevOps Engineer - Security Tools Team

About the job

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

We are looking for an Expert DevOps Engineer to lead the design, operation, and continuous evolution of SAP's Privileged Access Management (PAM) platform. You will provide expert technical leadership, drive agentic-first solutions, operational excellence, and platform reliability across SAP's enterprise environments.

What you'll build

• Lead the design, automation, and operation of the PAM platform ensuring consistent and reliable privileged access management at scale across multiple cloud environments, and enterprise infrastructure.
• Guide and enhance deployment and upgrade strategies for platform components, ensuring zero-downtime rollouts, controlled staged releases, and rapid rollback capability
• Design, and implement CI/CD pipelines and release workflows using GitHub Actions to deliver platform changes reliably and consistently across all environments
• Architect, implement and maintain infrastructure as code for provisioning, configuration, and lifecycle management of platform components across environments
• Spearhead observability and reliability engineering initiatives, implementing advanced monitoring, logging, and alerting solutions while improving service performance, accelerating incident resolution, and reducing operational toil through automation.
• Define and execute the vision for advanced AI engineering capabilities, leading the design and implementation of autonomous and agentic AI solutions, AI-augmented software engineering, intelligent workflow automation, Context Engineering, and AI quality governance. Enable enterprise-wide AI adoption by establishing standards, reusable frameworks, and operational models that deliver scalable, secure, and high-impact business transformation.
• Champion an Automation-First and Security-First mindset, leveraging infrastructure as code, policy as code, and automated operational workflows to improve reliability, reduce manual effort, strengthen security posture, and standardize platform operations
• Participate in an on-call rotation; troubleshoot production incidents, perform root cause analysis, and drive post-incident improvements
• Partner with product engineering teams to improve platform reliability, deployment models, and operational scalability

What You Bring

• 8+ years of experience in DevOps, platform engineering, cloud infrastructure, or a related field, with a demonstrated track record of delivering at enterprise scale
• Demonstrated expertise in architecting and leading complex automation and platform delivery initiatives at scale across multi-cloud and enterprise environments, with deep expertise in at least one major cloud provider (AWS, Azure, or GCP)
• Advanced expertise in containerization and Kubernetes technologies, including architecture, networking, storage, security, and operational best practices.
• Ability to design and build agentic AI solutions and AI-driven automation.
• Deep experience designing and optimizing robust CI/CD pipelines and release workflows, with a focus on automation, reliability, compliance, and multi-environment deployment strategies
• Proficiency with Infrastructure as Code and Configuration Management tools (Terraform, Crossplane, Ansible)
• Strong scripting and programming skills (Python, PowerShell, or Bash) for automation, platform integration, and operational tooling
• Practical experience in observability tooling (Grafana, Dynatrace, Splunk, or equivalent) and experience defining and supporting monitoring and alerting for production systems
• Expert in the use AI tools (LLMs, AI-assisted coding, AI-Ops tooling) as a core part of day-to-day engineering work
• Demonstrated experience mentoring engineers and leading cross-functional technical initiatives within security or platform engineering teams
• Experience in compliance, governance, and security frameworks: CIS Benchmarks, STIG, SOC 2, PCI, SEC.309, and OWASP Top 10
• Excellent written communication: ability to author and review architecture decision records, threat models, postmortems, and security review documentation; able to influence stakeholders without direct authority
• Advanced problem-solving skills, ownership mindset, and ability to operate effectively in fast-paced globally distributed environment
• Expert knowledge managing, deploying, and securing Windows and Linux environments at scale.

Nice to have

• SAP BTP Kyma and Cloud Foundry operations experience
• Experience with messaging and event streaming platforms such as RabbitMQ

Where you belong

You will be part of a globally distributed security engineering team driving the automation and operational excellence of SAP's Privileged Access Management platform across enterprise cloud environments.

This role combines advanced cloud automation engineering with a strong security and DevOps mindset. You will design and implement security tools using modern cloud-native technologies, build and maintain CI/CD pipelines, manage infrastructure-as-code, and develop tooling that reduces operational toil across the PAM platform. You will also guide security review processes, enhance certificate and credential lifecycle automation, and strengthen compliance with SAP's security and access control standards across multiple cloud environments.

Driven by curiosity, ownership, and a passion for innovation, you will challenge existing processes, champion best practices, mentor others through your expertise, and continuously improve the platform's security, scalability, and operational maturity.