We help the world run better

At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

What You'll Build

In this role, you will build and scale automated, secure, and self-service capabilities for managing non-human identities across enterprise environments.
You will design and implement automation frameworks that govern the full lifecycle of credentials, secrets, and certificates—ensuring secure,
compliant, and efficient access for applications, services, and pipelines.
Your work will focus on eliminating manual processes and hardcoded credentials by integrating secrets management platforms into CI/CD pipelines, enabling dynamic and secure secrets delivery at runtime. You will develop automation to continuously discover unmanaged or misconfigured identities across cloud and on-prem landscapes, reducing risk and improving visibility.
You will engineer event-driven workflows for credential rotation, expiry management, and policy enforcement, as well as build infrastructure-as-code patterns to standardize vault provisioning and configuration.
A key part of your impact will be enabling application teams through self-service onboarding capabilities, accelerating adoption of secure secrets management without friction.
By collaborating with security operations and engineering teams, you will help automate incident response and enforce security best practices, ensuring that NHI access is continuously monitored,validated, and aligned with enterprise policies.
Your contributions will directly improve the organization's security posture while enabling developers to innovate securely at scale.

What You Bring

Proven experience in security engineering, DevSecOps, or IAM/PAM domains, with a focus on non-human identity and secrets management
Strong hands-on expertise with secrets management platforms (e.g., CyberArk, HashiCorp Vault, cloud-native secret managers) and their configuration (auth methods, policies, secrets engines)
Solid understanding of NHI lifecycle management including credential rotation, certificate management, and secure onboarding practices
Experience integrating secrets management into CI/CD pipelines and enabling secure, pipeline-native secret injection
Proficiency in automation and infrastructure-as-code tools (e.g., Terraform, scripting languages such as Python or Bash)
Experience with cloud platforms (AWS, Azure, GCP) and containerized environments (Kubernetes) in the context of identity and secrets security
Ability to design and implement automated workflows for discovery, rotation, policy enforcement, and compliance validation
Strong troubleshooting skills to resolve integration and deployment challenges across platforms and applications
Experience working cross-functionally with development, platform, and security teams, including conducting technical workshops and providing guidance
Good to have: experience with security testing practices (including chaos testing or penetration testing support), and exposure to event-driven architectures and orchestration tools

Bring out your best

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion

SAP's culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: [HIDDEN TEXT].

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.

Successful candidates might be required to undergo a background verification with an external vendor.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Requisition ID: 438118 | Work Area: Consulting and Professional Services | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations:

Non-Human Identities (NHI) Management Engineer