Security Data Platform Engineer Expert

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging - but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

Job Description:

At SAP, we are seeking a highly skilled Security Data Platform Engineer Expert to join our dynamic Data Platform Engineering Design Team. You will be instrumental in the development, maintenance, and optimization of our Data Platform tools within the SAP global logging and monitoring ecosystem. This role involves building and maintaining the infrastructure for our global Detection Platform, collaborating with key stakeholders, and serving as a mentor to Operations staff. Your work will directly impact data hygiene, quality, and the overall data strategy of the Data Platform.

Key Responsibilities:

• Develop, maintain, configure, and troubleshoot Data Platform tools to ensure optimal performance and reliability.
• Collaborate with stakeholders to gather requirements and implement successful data solutions.
• Act as a point of escalation during outages, providing expert troubleshooting and incident response.
• Mentor Operations staff to enhance their skills and understanding of data platform operations.
• Contribute to data hygiene and quality initiatives, aligning with the data strategy of the Data Platform.
• Construct new capabilities, enhance existing mechanisms, and provide comprehensive system documentation for future colleagues.

About Us:

The Data Platform Engineering Design Team at SAP develops and maintains the Splunk (SaaS and on-premise) and Cribl platform, which is utilized by partner organizations for Incident Response, Cyber Threat Intelligence, and Attack Surface Reduction (Vulnerability Management) across SAP lines-of-business. Our platform aggregates telemetry data from various security tools for correlation, analysis, and threat detection. It serves as a critical investigative tool for Incident Responders within our centralized security function (Cyber Defense & Design) and supports IT Operations workloads for proactive monitoring and compliance.

What You Bring:

Splunk Expertise:

• Splunk Administration: Deep knowledge of Splunk administration, including index management, forwarder configuration, and deployment.
• Advanced Search and Reporting: Expertise in Splunk's search processing language (SPL) for advanced queries, reports, and dashboards.
• App Development: Experience in developing custom Splunk apps and integrations.
• Splunk Add-ons: Familiarity with Splunk add-ons and their configurations.
• Performance Tuning: Ability to optimize Splunk performance through indexing strategies, forwarder configurations, and hardware optimization.

Cribl Expertise:

• Cribl Stream: Proficiency in configuring and managing Cribl Stream for data routing, transformation, and optimization.
• Data Pipeline Management: Expertise in building and managing data pipelines using Cribl's processing capabilities.
• Transform and Filter: Advanced knowledge of regex, transforms, and grok rules for real-time data manipulation.
• Scalability and Performance: Ability to optimize Cribl deployments for high scalability and performance.
• Integration: Experience integrating Cribl with various data sources and destinations, such as Splunk, ELK, and cloud services.

Technical Expertise:

• Proficiency with Data Tools: Expertise in Splunk, Cribl, and ELK, and familiarity with standard data formats or protocols like JSON, CSV, and syslog. Advanced experience with regex/transforms/grok rules.
• Network Protocols: Strong understanding of major protocols (HTTP, TCP, UDP, etc.), and the ability to explain and differentiate them (e.g., TCP vs UDP, HTTP request/response).
• Linux Administration Skills: Comprehensive knowledge of Linux, including bash and GNU CLI tools (grep, tail, sed, etc.) and subsystems like systemd. Ability to explain Linux concepts, such as filesystems, kernel tuning, /proc, boot process, etc. Knowledge of eBPF and modern Linux concepts is a plus.
• GitHub VCS Fundamentals: Proficient with GitHub and CI/CD integrations (Jenkins, GitHub Actions, etc.).
• Container and Job Systems: Experience with container and job systems like Kubernetes (K8s), Nomad, ECS, and understanding of container primitives on Linux.
• Enterprise Authentication and Authorization: Familiarity with enterprise authentication and authorization systems and protocols (SAML/LDAP/OIDC or similar).
• Network Design and Troubleshooting: Strong network design and troubleshooting skills, including DNS.
• Configuration Management: Knowledge of large-scale configuration management using tools like Ansible, Chef, Puppet, or Satellite, with experience managing via APIs.
• AWS Management: Experience with AWS management, particularly EC2, Route53, Lambda, VPC, and S3.

Nice to Have:

• ETL/Data Pipeline Implementation: Understanding of high-performance ETL/Data pipeline implementation and performance implications of various tools or protocols (Kafka, AMQP, Redis, Spark, MapReduce, etc.).
• Full-Stack Development: Experience developing full-stack web applications using modern technologies (React, HTMX, etc.).
• Monitoring and Observability Tools: Experience with monitoring and observability tools for cloud-based workloads, such as Grafana or Prometheus.
• Production Systems on AWS: Experience building production systems on AWS, including managing EC2, SSM, AMI builders like Packer, and OS authentication/authorization.

Join the SAP Data Platform Engineering Design Team to shape the future of our data platform and play a pivotal role in safeguarding our global ecosystem. Our innovative environment offers a blend of cutting-edge technology and collaborative teamwork, providing ample opportunities for professional growth and development. If you are passionate about data, security, and continuous improvement, apply today to be a part of our dynamic team.

Bring out your best
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone - regardless of background - feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.

SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 140400 - 238600(CAD) CAD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount, and any actual payout amount is dependent on company and personal performance. A summary of benefits and eligibility requirements can be found by clicking this link: www.SAPNorthAmericaBenefits.com.

Due to the nature of the role, which involves global interactions with SAP entities, as well as with employees and stakeholders in Canada, functional proficiency in English is required for positions based in the Quebec.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 434770 | Work Area: Information Technology | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid