SAP BTP Cloud Platform Security Engineer

Imagine what you could do here. At Apple, great ideas have a way of becoming great products, services, and customer experiences very quickly. By bringing passion, dedication, and technical excellence to your job, there is no telling what you could accomplish. We are establishing a centralized team to support enterprise landscape modernization, leveraging the SAP Business Technology Platform (BTP), AliCloud, and other cloud technologies to drive secure, seamless application onboarding and cloud-native integrations. As a Cloud Platform Security Engineer, you will define baseline security controls, governance frameworks, and secure reference architectures that enable development teams to adopt cloud technologies safely. You will work closely with functional, technical, and security stakeholders to translate complex compliance requirements into automated engineering controls, ensuring a secure, compliant, and resilient cloud platform ecosystem.

This role is responsible for designing, implementing, and maintaining robust security controls across SAP BTP and hybrid cloud runtimes. You will author secure reference architectures, trust-boundary diagrams, and network security topologies to safeguard enterprise integrations and microservices. Additionally, you will partner with cross-functional teams to automate security testing, support compliance audits, and drive platform security optimization.

Minimum Qualifications

• Education: Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, Software Engineering, or equivalent practical experience.
• Experience (5+ years) in software engineering or cybersecurity, with a focus on designing, securing, and operating enterprise cloud platform solutions.
• Experience implementing secure configurations on the SAP Business Technology Platform (BTP) ecosystem, including application development/extension on Cloud Foundry or Kyma runtimes.
• Experience securing integration touchpoints, including API gateway security, policy enforcement, rate-limiting, and payload validation in SAP Integration Suite or enterprise API Management platforms.
• Experience securing message brokers and event mesh systems (such as Advanced Event Mesh, Apache Kafka, or Solace PubSub+).
• Experience translating compliance and security requirements into actionable engineering controls.
• Experience collaborating with multi-functional product and engineering teams to drive security initiatives.
• Other: SAP BTP Certification (such as Administrator, Security, Technology Consultant, or related).

Preferred Qualifications

• Experience defining and enforcing enterprise SAP security governance frameworks, secure API policies, and data classification standards.
• Experience with DevSecOps practices, including integrating automated security testing (SAST/DAST, dependency scanning, secret detection) into CI/CD pipelines and SAP Cloud Transport Management (CTMS).
• Experience implementing cloud observability and monitoring tools (e.g., Dynatrace, SAP Cloud ALM, Prometheus, Grafana, or Splunk) for audit logging and security event detection.
• Experience applying zero-trust architecture principles and secure network topology designs across hybrid (on-premises to public cloud) infrastructures.