DevOps Security Engineer – SAP Platforms

EDV Werke is looking for a DevOps Security Engineer – SAP Platforms

Working Model: Remote

Form of cooperation: B2B Contract

• Pipeline Design and Implementation – Design, implement, and maintain GitLab CI/CD pipelines tailored for SAP development projects, ensuring efficient automation and adherence to best practices in DevSecOps.
• Security and Compliance Integration – Integrate security, compliance, and performance controls into all CI/CD workflows, ensuring that infrastructure and code deployments meet organizational and regulatory standards.
• Collaboration with SAP Teams – Work closely with SAP developers, architects, and project stakeholders to align pipeline configuration and deployment strategies with project requirements and business priorities.
• Infrastructure-as-Code Management – Develop, maintain, and optimize infrastructure-as-code scripts and templates to support automated deployments and secure infrastructure provisioning.
• Pipeline Optimization and Review – Analyze existing CI/CD configurations, identify inefficiencies or security gaps, and implement improvements to maximize pipeline performance and reliability.
• Tooling and Quality Assurance – Configure and manage quality and security automation tools (e.g., static code analysis, vulnerability scanning) to ensure code quality, secure releases, and early detection of issues.
• Short-Term Project Leadership – Take ownership of short-term project deliverables, providing guidance and technical leadership to ensure pipeline implementation aligns with project timelines and objectives.
• Platform Expertise – Apply deep knowledge of SAP platforms (including cloud-native SAP services) to ensure pipelines and automation scripts are optimized for SAP-specific workflows.
• Risk Identification and Mitigation – Proactively identify potential technical or security risks within CI/CD processes, drive mitigation strategies, and ensure timely escalation for critical issues.
• Documentation and Reporting – Prepare and maintain technical documentation for pipelines, infrastructure configurations, and automation processes, ensuring clarity and accessibility for stakeholders and team members.
• Knowledge Sharing and Mentoring – Support knowledge transfer and onboarding of team members by providing guidance on DevSecOps best practices, tools, and SAP-specific CI/CD processes.
• Cross-Functional Collaboration – Collaborate with security, infrastructure, and operations teams to ensure pipelines meet broader IT governance, operational, and security standards.
• Continuous Improvement – Continuously evaluate DevSecOps practices, implement automation enhancements, and drive innovation in SAP pipeline workflows to improve efficiency, security, and scalability.

Must-Have Skills:

• DevSecOps Expertise – Demonstrate strong hands-on experience implementing DevSecOps methodologies and tooling, ensuring secure, efficient, and scalable SAP CI/CD pipelines.
• GitLab CI/CD Proficiency – Design, manage, and optimize GitLab pipelines for SAP environments, with proven ability to analyze and improve existing configurations rather than only operating pre-built pipelines.
• Security Automation and Compliance – Integrate security and compliance measures into all pipeline workflows, applying vulnerability scanning, code analysis, and automated checks to enforce organizational standards.
• SAP Platform Knowledge – Apply deep understanding of SAP platforms, including cloud-native SAP services, to ensure pipeline processes align with platform requirements and development best practices.
• Infrastructure-as-Code and Automation – Develop, maintain, and optimize infrastructure-as-code scripts and automated deployment processes to support repeatable, secure, and efficient deployments.
• Analytical and Problem-Solving Skills – Identify inefficiencies, potential security risks, or bottlenecks within CI/CD processes, and implement improvements or mitigation strategies proactively.
• Collaboration with Development Teams – Work closely with SAP developers, architects, and project stakeholders to align pipeline configurations with project goals, ensuring both operational effectiveness and business value.
• Quality and Performance Focus – Maintain high standards of pipeline performance, reliability, and code quality through continuous monitoring, testing, and validation of automated processes.
• Documentation and Knowledge Sharing – Produce clear, detailed documentation of pipelines, processes, and security measures, while mentoring team members and sharing best practices across the project.
• Project Delivery Orientation – Take ownership of short-term project deliverables, ensuring that pipeline implementation meets deadlines, quality standards, and security requirements.
• Communication Skills – Effectively communicate technical and security considerations to stakeholders, development teams, and management, ensuring transparency and shared understanding.
• Adaptability and Autonomy – Thrive in fast-paced, short-term project environments, taking initiative to solve problems independently while maintaining alignment with team and organizational objectives.
• Continuous Improvement – Proactively seek opportunities to enhance CI/CD pipelines, security practices, and automation processes, driving efficiency, reliability, and innovation within SAP DevSecOps workflows.

Nice to Have:

• SAP On-Stack Development Experience – Background in SAP On-Stack development, with familiarity in designing and implementing solutions within the SAP ABAP or related platform environments.

• SAP CAP / Node.js Application Knowledge – Experience with SAP Cloud Application Programming (CAP) model or Node.js application development, enabling alignment of CI/CD pipelines with modern SAP development approaches.

Benefits:

• Competitive salary with performance-based bonuses.
• Opportunities for professional development and advancement.
• Dynamic and collaborative work environment.