BTP Platform Security Engineer
About the role
Centralized role to support enterprise landscape modernization using SAP BTP, AliCloud, and other cloud technologies. Define baseline security controls, governance frameworks, and secure reference architectures to enable safe adoption of cloud technologies. Collaborate with stakeholders to translate compliance requirements into automated engineering controls and maintain a secure, compliant cloud platform ecosystem.
Responsibilities
- Design and implement baseline security controls, encryption strategies (at rest and in transit), and secrets management standards across Cloud Foundry, Kyma, and multi-cloud runtimes.
- Develop and maintain secure reference architectures, trust-boundary diagrams, network security zones, and traffic flow models for enterprise integrations and microservices.
- Partner with cross-functional stakeholders to define API security policies, rate-limiting rules, and data architecture security standards.
- Embed robust security controls and automated compliance mechanisms into platform designs to minimize risk.
- Build proofs-of-concept (PoCs) and rapid prototypes to demonstrate the feasibility of emerging security and cloud technologies.
- Support internal and external compliance audits, risk assessments, and vulnerability remediations.
- Drive ongoing platform optimization, elevating system reliability and cloud security standards across the ecosystem.
Qualifications
- Education: Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, Software Engineering, or equivalent practical experience.
- Experience (5+ years) in software engineering or cybersecurity, with a focus on designing, securing, and operating enterprise cloud platform solutions.
- Experience implementing secure configurations on the SAP Business Technology Platform (BTP) ecosystem, including application development/extension on Cloud Foundry or Kyma runtimes.
- Experience securing integration touchpoints, including API gateway security, policy enforcement, rate-limiting, and payload validation in SAP Integration Suite or enterprise API Management platforms.
- Experience securing message brokers and event mesh systems (such as Advanced Event Mesh, Apache Kafka, or Solace PubSub+).
- Experience translating compliance and security requirements into actionable engineering controls.
- Experience collaborating with multi-functional product and engineering teams to drive security initiatives.
- Other: SAP BTP Certification (such as Administrator, Security, Technology Consultant, or related).
- Experience defining and enforcing enterprise SAP security governance frameworks, secure API policies, and data classification standards.
- Experience with DevSecOps practices, including integrating automated security testing (SAST/DAST, dependency scanning, secret detection) into CI/CD pipelines and SAP Cloud Transport Management (CTMS).
- Experience implementing cloud observability and monitoring tools (e.g., Dynatrace, SAP Cloud ALM, Prometheus, Grafana, or Splunk) for audit logging and security event detection.
- Experience applying zero-trust architecture principles and secure network topology designs across hybrid (on-premises to public cloud) infrastructures.
Skills
About Apple
Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.
Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.
More open roles at Apple
- Senior UI Software Engineer, Cocoa3d agoCupertino, CA · Software and Services
- AIML - Machine Learning Engineer, Visual Intelligence Technology3d agoHybrid (Cupertino/Santa Clara/SSeattle area (3 work locations)) · Visual Intelligence Technology
- Physical Design Methodology CAD Engineer3d agoHybrid (Sunnyvale, California), Hybrid (Austin, Texas) +3 more · Hardware Technology CAD team / Silicon Technologies group
- Sr. ML Optimization Engineer, ASE Efficiency3d agoHybrid (San Diego, CA) · Software and Services
- Sr. ML Optimization Engineer, ASE Efficiency3d agoHybrid (Seattle, WA) · Software and Services