Non-Human Identities (NHI) Management Engineer

We help the world run better
At SAP we keep it simple: you bring your best to us and well bring out the best in you. Were builders touching over 20 industries and 80% of global commerce and we need your unique talents to help shape whats next. The work is challenging but it matters. Youll find a place where you can be yourself prioritize your wellbeing and truly belong. Whats in it for you Constant learning skill growth great benefits and a team that wants you to grow and succeed.

What youll build

• In this role you will build and scale automated secure and self-service capabilities for managing non-human identities across enterprise environments.
• You will design and implement automation frameworks that govern the full lifecycle of credentials secrets and certificatesensuring secure
• compliant and efficient access for applications services and pipelines.
• Your work will focus on eliminating manual processes and hardcoded credentials by integrating secrets management platforms into CI/CD pipelines enabling dynamic and secure secrets delivery at runtime. You will develop automation to continuously discover unmanaged or misconfigured identities across cloud and on-prem landscapes reducing risk and improving visibility.
• You will engineer event-driven workflows for credential rotation expiry management and policy enforcement as well as build infrastructure-as-code patterns to standardize vault provisioning and configuration.
• A key part of your impact will be enabling application teams through self-service onboarding capabilities accelerating adoption of secure secrets management without friction.
• By collaborating with security operations and engineering teams you will help automate incident response and enforce security best practices ensuring that NHI access is continuously monitoredvalidated and aligned with enterprise policies.
• Your contributions will directly improve the organizations security posture while enabling developers to innovate securely at scale.

What you bring

• Proven experience in security engineering DevSecOps or IAM/PAM domains with afocus on non-human identity and secrets management
• Strong hands-on expertise with secrets management platforms (e.g. CyberArk HashiCorpVault cloud-native secret managers) and their configuration (auth methods policies secrets engines)
• Solid understanding of NHI lifecycle management including credential rotation certificatemanagement and secure onboarding practices
• Experience integrating secrets management into CI/CD pipelines and enabling securepipeline-native secret injection
• Proficiency in automation and infrastructure-as-code tools (e.g. Terraform scriptinglanguages such as Python or Bash) Experience with cloud platforms (AWS Azure GCP) and containerized environments (Kubernetes) in the context of identity and secrets security
• Ability to design and implement automated workflows for discovery rotation policyenforcement and compliance validation
• Strong troubleshooting skills to resolve integration and deployment challenges acrossplatforms and applications
• Experience working cross-functionally with development platform and security teamsincluding conducting technical workshops and providing guidance
• Good to have: experience with security testing practices (including chaos testing orpenetration testing support) and exposure to event-driven architectures and orchestration tools

#LI-AC99

Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software SAP has evolved to become a market leader in end-to-end business application software and related services for database analytics intelligent technologies and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide we are purpose-driven and future-focused with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries people or platforms we help ensure every challenge gets the solution it deserves. At SAP you can bring out your best.

We win with inclusion
SAPs culture of inclusion focus on health and well-being and flexible working models help ensure that everyone regardless of background feels included and can run at their best. At SAP we believe we are made stronger by the unique capabilities and qualities that each person brings to our company and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application please send an e-mail with your request to Recruiting Operations Team:

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age race religion national origin ethnicity gender (including pregnancy childbirth et al) sexual orientation gender identity or expression protected veteran status or disability in compliance with applicable federal state and local legal requirements.

Successful candidates might be required to undergo a background verification with an external vendor.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 438118 Work Area: Consulting and Professional Services Expected Travel: 0 - 10% Career Status: Professional Employment Type: Regular Full Time Additional Locations: #LI-Hybrid