Join SAP as a Product Security Expert (f/m/d) in Berlin, DE (hybrid). In this regular full-time professional role, you will define and document security architectures for SAP Cloud Infrastructure's sovereign and regulated cloud environments, combining clear documentation skills with hands-on platform engineering.
Requirements
Extensive hands-on experience designing and operating security architectures for IaaS cloud environments.
Profound knowledge of OpenStack, Kubernetes, and related tools.
Strong programming skills in Go and/or Python.
Familiarity with regulatory frameworks such as ISO 27001, SOC 2, C5, and BSI IT-Grundschutz.
Fluent English; German preferred and French appreciated.
Skills & Responsibilities
Cloud Security Architecture: Design security architectures for cloud services running on OpenStack and Kubernetes to translate regulatory requirements into concrete controls.
Programming & Implementation: Contribute to the implementation of security controls and services using Go and Python within the technology stack.
Documentation & Compliance: Author and maintain security reference architectures and capability descriptions meeting BSI and external auditor standards.
Auditing & Stakeholder Engagement: Serve as a technical subject-matter expert during external regulatory assessments and customer audits.
Potential transition routes: People from Cloud Security Engineer, Infrastructure Architect, or DevOps Engineer roles may bring relevant cloud security and platform skills, alongside meeting technical requirements.
Job description
We help the world run better At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.
Summary & Role Information:
Join SAP Cloud Infrastructure and help shape the security foundation of the next generation of cloud services and platform capabilities powering SAP's sovereign and regulated cloud environments.
As a Product Security Expert in our Security Engineering team, you will define and document the security architecture that underpins SAP Cloud Infrastructure's expansion into new regions with distinct regulatory requirements. You will create externally publishable security reference architectures and security function descriptions that satisfy public authorities such as the BSI and external auditors — while simultaneously designing and implementing the security architecture of our OpenStack- and Kubernetes-based cloud platform. This is not a documentation-only role. We are looking for someone who combines the ability to articulate complex security architectures clearly with the hands-on skill to design and build them.
What You'll Do:
Author and maintain security reference architectures, security function and capability descriptions for SAP Cloud Infrastructure that meet the standards expected by public authorities (e.g. BSI) and external auditors.
Design security architectures for new and existing cloud services running on OpenStack and Kubernetes. Translate regulatory and customer requirements into concrete, implementable security controls.
Contribute to the implementation of security controls and services in Go and Python within SAP Cloud Infrastructure's technology stack.
Serve as a technical subject-matter expert during external regulatory assessments and customer audits. Ensure documentation and architecture stay aligned with evolving requirements as SAP Cloud Infrastructure expands into new regions (France, Netherlands, and beyond).
Shape architecture and long-term technical direction for security across multiple components, services, and strategic engineering areas.
Act as a technical sparring partner for engineers, architects, product stakeholders, and engineering leadership on security architecture topics.
Collaborate across teams to embed security architecture decisions into the platform lifecycle.
Mentor engineers through technical guidance, code reviews, and knowledge sharing.
What You Bring:
### Technical Foundation
Extensive hands-on experience designing and operating security architectures for IaaS cloud environments
Profound knowledge about OpenStack, Kubernetes and related tools.
Demonstrated ability to produce high-quality, externally publishable security architecture documentation (reference architectures, control frameworks, capability descriptions).
Strong programming skills in Go and/or Python, with the ability and motivation to remain hands-on.
Strong understanding of cloud security domains: identity and access management, network security, encryption, logging and monitoring, vulnerability management.
Familiarity with regulatory and audit frameworks relevant to cloud infrastructure (e.g. ISO 27001, SOC 2, C5, BSI IT-Grundschutz).
Experience with European regulatory environments, preferrably France (ANSSI), Germany, Netherlands, etc.
Ability to communicate complex technical topics clearly to both technical and non-technical audiences, including regulators, auditors, and customers.
Experience working in agile, collaborative environments with distributed international teams.
We don't expect you to have experience with every technology listed. If you have a strong foundation in several of these areas and are interested in learning the others, we'd be happy to hear from you.
### Core AI Skills
AI-assisted engineering is part of how we work at SAP.
Experience using AI tools for engineering tasks such as coding, troubleshooting, documentation, and automation.
Ability to provide effective context and instructions and critically review AI-generated outputs before using them in production.
Practical application of AI in code development, documentation creation, and ongoing maintenance.
Experience using AI to support automation, infrastructure tooling, or prototyping.
Willingness to share useful AI practices and contribute to their responsible use within the team.
### Professional Skills
Comfortable collaborating across teams, cultures, and locations and sharing knowledge with others.
Able to communicate technical topics clearly, both verbally and in writing.
Structured and reliable, with the ability to take ownership while working collaboratively.
Strong stakeholder management skills, including the ability to navigate escalation paths and establish the right contact persons in the face of a dynamically growing organizational environment.
Curious and pragmatic when approaching unfamiliar or complex problems.
Fluent English. German preferred. French appreciated.
### Tech You Bring
Go, Python, or comparable programming languages
OpenStack
Kubernetes ecosystem
CI/CD tools and practices
Linux environments
Observability tools such as Prometheus and Grafana — nice to have
Meet the Team:
You will join SAP Cloud Infrastructure, where we build the infrastructure behind SAP's enterprise, sovereign, and regulated cloud environments using technologies such as OpenStack, Kubernetes/Gardener, Ceph, and Prometheus.
Our engineering culture is hands-on and collaborative. We work on real infrastructure problems, share what we learn, and believe a private cloud is something you build, not something you rent.
Bring out your best SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.
We win with inclusion SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
AI Usage in the Recruitment Process
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
Please note that any violation of these guidelines may result in disqualification from the hiring process.
Requisition ID: 458446 | Work Area: Software-Design and Development | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid
