Senior Cyber Security Engineer

SAP•Reston, VA

3d•$131,000 - $271,600•Hybrid

About The Position

The Sovereign Cloud Technology and Delivery unit is responsible for enabling and operating a multitude of SAP solutions according to global as well as local compliance and security requirements. Following a globally designed approach we help our customers to leverage the benefits of the cloud – while meeting national regulatory and customer demands around data residency, local and credentialed personnel and facilities. We are looking for a Senior Security Engineer (f/m/d) within the Sovereign Cloud Security Engineering team. In this role, you will be engaging with existing infrastructure and product experts to help build up a globally distributed team of highly motivated individuals responsible for the secure deployment, upgrade and lifecycle management of the Sovereign Cloud non-production security infrastructure. You will inspire innovation and drive execution of disciplined and standardized security processes and tools addressing mission-critical capability gaps and opportunities for maximized efficiency. You will help identify trade-offs in security deployment plans and any key day-to-day operational decisions impacting infrastructure investments significantly. You will help the team to strengthen best practices on automated provisioning of foundational cloud infrastructure and of Sovereign Cloud ready SAP products. You will manage development and automation of security solutions in alignment with security strategy. You need to ensure the team’s knowledge base is kept consistently up-to-date with native hyperscaler capabilities and modern infrastructure management tools. Starting from this status quo, you will design security concepts for our infrastructure management on the global scale. This will involve significant coordination with the global Sovereign Cloud operations teams and our hyperscaler provider partners.

Requirements

Bachelor’s or Master's degree in Computer Science, Information Technology or Engineering or other relevant disciplines
Ability to manage through ambiguities while being innovative and collaborative
Ability to take a technical approach to design specifications of our large-scale network
Strong analytical research and technology skills and the willingness to learn new topics quickly
Ability to think strategically, delivering services to meet stakeholders’ demands on a timely basis
Ability to mix Open Source and Commercial technologies to achieve objectives
Willingness to contribute to Open Source security projects and the greater security community
Proven ability to produce documentation for processes and procedures
Proven ability to work and lead in cross-architecture teams
Capability to influence without formal authority
Strong communication and interpersonal skills
Strong cultural awareness and intercultural competencies
Ability to build trusted relationships with key stakeholders
Persistence, self-motivation and willingness to work under pressure
Proven ability to deliver against challenging timelines
Ability to speak and write in English fluently
Very good understanding of infrastructure and security related topics
Minimum 5 years of software development experience in all phases of SDLC, including hands-on experience with infrastructure, application or database migration
Experience deploying technical infrastructure at a global scale
Balanced expertise in both full stack application development and infrastructure development
Thorough understanding of infrastructure firewalls, load balancers, storage, monitoring, security, IAM etc. and have experience with orchestration to develop a cloud solution
Strong experience in operating systems administration and security engineering
Working knowledge of Ansible, Terraform, CI/CD tools, and GIT is required
Exposure to either NIST, ISO, or other compliance frameworks
Willingness to subject yourself to a governmental security clearance process

Nice To Haves

Working knowledge of Log Correlation, Vulnerability Management, Web Application Testing concepts is a plus
Familiarity with managing and securing Kubernetes environments
Experience with securing products on AWS and Azure, GCP is a plus
Experience with sovereign cloud is a plus

Responsibilities

Manage development and automation of security solutions in alignment with security strategy.
Ensure the team’s knowledge base is kept consistently up-to-date with native hyperscaler capabilities and modern infrastructure management tools.
Design security concepts for our infrastructure management on the global scale.
Coordinate with the global Sovereign Cloud operations teams and our hyperscaler provider partners.
Inspire innovation and drive execution of disciplined and standardized security processes and tools addressing mission-critical capability gaps and opportunities for maximized efficiency.
Identify trade-offs in security deployment plans and any key day-to-day operational decisions impacting infrastructure investments significantly.
Strengthen best practices on automated provisioning of foundational cloud infrastructure and of Sovereign Cloud ready SAP products.
Provision and support new and existing security cloud services through Terraform.
Produce documentation for processes and procedures.
Lead in cross-architecture teams.