Security Data Platform Engineer Expert

We help the world run better
At SAP we keep it simple: you bring your best to us and well bring out the best in you. Were builders touching over 20 industries and 80% of global commerce and we need your unique talents to help shape whats next. The work is challenging but it matters. Youll find a place where you can be yourself prioritize your wellbeing and truly belong. Whats in it for you Constant learning skill growth great benefits and a team that wants you to grow and succeed.

Job Description:

At SAP we are seeking a highly skilled Security Data Platform Engineer Expert to join our dynamic Data Platform Engineering Design Team. You will be instrumental in the development maintenance and optimization of our Data Platform tools within the SAP global logging and monitoring ecosystem. This role involves building and maintaining the infrastructure for our global Detection Platform collaborating with key stakeholders and serving as a mentor to Operations staff. Your work will directly impact data hygiene quality and the overall data strategy of the Data Platform.

Key Responsibilities:

• Develop maintain configure and troubleshoot Data Platform tools to ensure optimal performance and reliability.
• Collaborate with stakeholders to gather requirements and implement successful data solutions.
• Act as a point of escalation during outages providing expert troubleshooting and incident response.
• Mentor Operations staff to enhance their skills and understanding of data platform operations.
• Contribute to data hygiene and quality initiatives aligning with the data strategy of the Data Platform.
• Construct new capabilities enhance existing mechanisms and provide comprehensive system documentation for future colleagues.

About Us:

The Data Platform Engineering Design Team at SAP develops and maintains the Splunk (SaaS and on-premise) and Cribl platform which is utilized by partner organizations for Incident Response Cyber Threat Intelligence and Attack Surface Reduction (Vulnerability Management) across SAP lines-of-business. Our platform aggregates telemetry data from various security tools for correlation analysis and threat detection. It serves as a critical investigative tool for Incident Responders within our centralized security function (Cyber Defense & Design) and supports IT Operations workloads for proactive monitoring and compliance.

What You Bring:

Splunk Expertise:

• Splunk Administration: Deep knowledge of Splunk administration including index management forwarder configuration and deployment.
• Advanced Search and Reporting: Expertise in Splunks search processing language (SPL) for advanced queries reports and dashboards.
• App Development: Experience in developing custom Splunk apps and integrations.
• Splunk Add-ons: Familiarity with Splunk add-ons and their configurations.
• Performance Tuning: Ability to optimize Splunk performance through indexing strategies forwarder configurations and hardware optimization.

Cribl Expertise:

• Cribl Stream: Proficiency in configuring and managing Cribl Stream for data routing transformation and optimization.
• Data Pipeline Management: Expertise in building and managing data pipelines using Cribls processing capabilities.
• Transform and Filter: Advanced knowledge of regex transforms and grok rules for real-time data manipulation.
• Scalability and Performance: Ability to optimize Cribl deployments for high scalability and performance.
• Integration: Experience integrating Cribl with various data sources and destinations such as Splunk ELK and cloud services.

Technical Expertise:

• Proficiency with Data Tools: Expertise in Splunk Cribl and ELK and familiarity with standard data formats or protocols like JSON CSV and syslog. Advanced experience with regex/transforms/grok rules.
• Network Protocols: Strong understanding of major protocols (HTTP TCP UDP etc.) and the ability to explain and differentiate them (e.g. TCP vs UDP HTTP request/response).
• Linux Administration Skills: Comprehensive knowledge of Linux including bash and GNU CLI tools (grep tail sed etc.) and subsystems like systemd. Ability to explain Linux concepts such as filesystems kernel tuning /proc boot process etc. Knowledge of eBPF and modern Linux concepts is a plus.
• GitHub VCS Fundamentals: Proficient with GitHub and CI/CD integrations (Jenkins GitHub Actions etc.).
• Container and Job Systems: Experience with container and job systems like Kubernetes (K8s) Nomad ECS and understanding of container primitives on Linux.
• Enterprise Authentication and Authorization: Familiarity with enterprise authentication and authorization systems and protocols (SAML/LDAP/OIDC or similar).
• Network Design and Troubleshooting: Strong network design and troubleshooting skills including DNS.
• Configuration Management: Knowledge of large-scale configuration management using tools like Ansible Chef Puppet or Satellite with experience managing via APIs.
• AWS Management: Experience with AWS management particularly EC2 Route53 Lambda VPC and S3.

Nice to Have:

• ETL/Data Pipeline Implementation: Understanding of high-performance ETL/Data pipeline implementation and performance implications of various tools or protocols (Kafka AMQP Redis Spark MapReduce etc.).
• Full-Stack Development: Experience developing full-stack web applications using modern technologies (React HTMX etc.).
• Monitoring and Observability Tools: Experience with monitoring and observability tools for cloud-based workloads such as Grafana or Prometheus.
• Production Systems on AWS: Experience building production systems on AWS including managing EC2 SSM AMI builders like Packer and OS authentication/authorization.

Join the SAP Data Platform Engineering Design Team to shape the future of our data platform and play a pivotal role in safeguarding our global ecosystem. Our innovative environment offers a blend of cutting-edge technology and collaborative teamwork providing ample opportunities for professional growth and development. If you are passionate about data security and continuous improvement apply today to be a part of our dynamic team.

Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software SAP has evolved to become a market leader in end-to-end business application software and related services for database analytics intelligent technologies and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide we are purpose-driven and future-focused with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries people or platforms we help ensure every challenge gets the solution it deserves. At SAP you can bring out your best.

We win with inclusion
SAPs culture of inclusion focus on health and well-being and flexible working models help ensure that everyone regardless of background feels included and can run at their best. At SAP we believe we are made stronger by the unique capabilities and qualities that each person brings to our company and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application please send an e-mail with your request to Recruiting Operations Team:

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age race religion national origin ethnicity gender (including pregnancy childbirth et al) sexual orientation gender identity or expression protected veteran status or disability in compliance with applicable federal state and local legal requirements.

SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAPs commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 140400 - 238600(CAD) CAD. The actual amount to be offered to the successful candidate will be within that range dependent upon the key aspects of each case which may include education skills experience scope of the role location etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. A summary of benefits and eligibility requirements can be found by clicking this link: .

Due to the nature of the role which involves global interactions with SAP entities as well as with employees and stakeholders in Canada functional proficiency in English is required for positions based in the Quebec.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 434770 Work Area: Information Technology Expected Travel: 0 - 10% Career Status: Professional Employment Type: Regular Full Time Additional Locations: #LI-Hybrid #SAPTorontoCareers