Senior Devsecops Developer

Requisition ID: 424224
Work Area: Information Technology
Expected Travel: 0 - 10%
Career Status: Professional
Employment Type: Regular Full Time
Career Level: T3
Hiring Manager: Hemanth Kusampudi
Recruiter Name: Thais Nadim
Additional Locations:
**Please submit your CV in English in order to proceed in the process. Only CVs in English will be considered.**

*** This is a hybrid-model opportunity and requires you to work 3 times a week in SAP office in São Leopoldo.**

**ABOUT THE ORGANISATION**

Enterprise Cloud Services (ECS) is a business unit in the Product Engineering Board Area. Enterprise Cloud Services supports customers throughout their cloud transformation and SAP S/4HANA adoption journey. We run the Intelligent Enterprise so they can be an Intelligent Enterprise. Our portfolio of SAP HANA Enterprise Cloud and SAP Cloud Application Services turns SAP products into a solution-as-a-service on customers’ preferred infrastructure, including Hyperscalers, as one SAP.

**ABOUT THE ROLE**

You will work closely with our CAE Secuirty Office and will support SAP Enterprise Cloud Services and develop appropriate platforms in building a self-service platform for Log-Preprocessing and Data analytics. You will report directly to ECS Chief Security Architect and Security Engineering Lead and you will support the CSO office, responsible for the effective and efficient security strategy, security programs, and services.

**SUMMARY**
- Lead cloud agnostic backend development for API Wrappers, API Orchestration with Cloud platforms (AWS, Azure, GCP).
- Helping frontend developers with AWS Amplify development and align with the backend development strategies with terraform.
- Perform root cause analysis, recommend, and implement tactical and strategic solutions to our self-service Security portal for Data processing, Data analytics platforms, compliance and security tools.
- Creating documentation to ensure all team members can perform required tasks.
- Ability to analyze data sets, determine the gaps and create reports on the findings.
- Creating and following guides and procedures to adhere to standards and policies.

**Day to Day - Responsibilities**:

- Implement and enhance self-service features, including managing permissions, updating lifecycle policies, and configuring notification integrations with cloud queue services (SQS, Pub/Sub, Azure Service Bus).
- Integrate and maintain robust authentication and authorization mechanisms using OAuth2 and OIDC protocols, working with our Identity Provider (CyberArk).
- Develop and maintain Infrastructure as Code using Terraform to provision and manage cloud resources.
- Implement and manage secrets within Hashicorp Vault for secure credential management.
- Design, build, and maintain CI/CD pipelines for automated testing, building, and deployment using GitHub Enterprise and other relevant tools.
- Establish and enforce Git branching strategies and workflows to facilitate collaborative development.
- Mentor and guide fellow engineers on best practices in backend development, cloud interactions, and code collaboration.
- Proactively identify and address technical challenges, performance bottlenecks, and security vulnerabilities.
- Collaborate with frontend engineers, product managers, and other stakeholders to define requirements and deliver high-quality solutions.

**Required Qualifications**:

- Proven experience as a backend engineer with significant experience in Golang.
- Strong understanding of building and consuming RESTful APIs.
- Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), with a preference for experience across multiple providers.
- Experience working with object storage services (S3, GCS, Azure Blob Storage).
- Solid understanding of authentication and authorization concepts, including OAuth2 and OIDC.
- Proficiency in Infrastructure as Code tools, specifically Terraform.
- Experience with CI/CD pipeline development and management.
- Familiarity with Git and collaborative development workflows (e.g., Pull Requests).
- Excellent problem-solving skills and the ability to work independently and figure out technical solutions with mínimal direction.
- Strong communication skills and the ability to create clear and concise technical documentation.

**Bonus Qualifications**:

- Experience with Hashicorp Vault.
- Experience with queueing services (SQS, Pub/Sub, Azure Service Bus).
- Familiarity with Identity Providers (IdPs) like CyberArk.
- Experience in a backend-for-frontend (BFF) architecture.
- Experience establishing development practices and contributing to team collaboration improvements.

**SAP'S DIVERSITY COMMITMENT**

To harness the power of innovation, SAP invests in the development of its diverse employees. We aspire to leverage the qualities and appreciate the unique competencies that each person brings to the company.

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, accord