BTP Platform Security Engineer
24 days ago
About us
Working at Apple means doing more than you ever thought possible and having more impact than you ever imagined.
- Size: 10,000+ employees
- Industry: Technology: Manufacturing
Why you should apply for a job to Apple:
Ranked as one of the Best Technology Companies in 2020
3.7/5 in overall job satisfaction
3.1/5 in supportive management
66% say women are treated fairly and equally to men
65% would recommend this company to other women
66% say the CEO supports gender diversity
Ratings are based on anonymous reviews by Fairygodboss members. See all reviews ›
Imagine what you could do here. At Apple, great ideas have a way of becoming great products, services, and customer experiences very quickly. By bringing passion, dedication, and technical excellence to your job, there is no telling what you could accomplish. We are establishing a centralized team to support enterprise landscape modernization, leveraging the SAP Business Technology Platform (BTP), AliCloud, and other cloud technologies to drive secure, seamless application onboarding and cloud-native integrations.
As a Cloud Platform Security Engineer, you will define baseline security controls, governance frameworks, and secure reference architectures that enable development teams to adopt cloud technologies safely. You will work closely with functional, technical, and security stakeholders to translate complex compliance requirements into automated engineering controls, ensuring a secure, compliant, and resilient cloud platform ecosystem.
Description
This role is responsible for designing, implementing, and maintaining robust security controls across SAP BTP and hybrid cloud runtimes. You will author secure reference architectures, trust-boundary diagrams, and network security topologies to safeguard enterprise integrations and microservices. Additionally, you will partner with cross-functional teams to automate security testing, support compliance audits, and drive platform security optimization.","responsibilities":"Design and implement baseline security controls, encryption strategies (at rest and in transit), and secrets management standards across Cloud Foundry, Kyma, and multi-cloud runtimes.
Develop and maintain secure reference architectures, trust-boundary diagrams, network security zones, and traffic flow models for enterprise integrations and microservices.
Partner with cross-functional stakeholders to define API security policies, rate-limiting rules, and data architecture security standards.
Embed robust security controls and automated compliance mechanisms into platform designs to minimize risk.
Build proofs-of-concept (PoCs) and rapid prototypes to demonstrate the feasibility of emerging security and cloud technologies.
Support internal and external compliance audits, risk assessments, and vulnerability remediations.
Drive ongoing platform optimization, elevating system reliability and cloud security standards across the ecosystem.
Preferred Qualifications
Experience defining and enforcing enterprise SAP security governance frameworks, secure API policies, and data classification standards.
Experience with DevSecOps practices, including integrating automated security testing (SAST/DAST, dependency scanning, secret detection) into CI/CD pipelines and SAP Cloud Transport Management (CTMS).
Experience implementing cloud observability and monitoring tools (e.g., Dynatrace, SAP Cloud ALM, Prometheus, Grafana, or Splunk) for audit logging and security event detection.
Experience applying zero-trust architecture principles and secure network topology designs across hybrid (on-premises to public cloud) infrastructures.
Minimum Qualifications
Education: Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, Software Engineering, or equivalent practical experience.
Experience (5+ years) in software engineering or cybersecurity, with a focus on designing, securing, and operating enterprise cloud platform solutions.
Experience implementing secure configurations on the SAP Business Technology Platform (BTP) ecosystem, including application development/extension on Cloud Foundry or Kyma runtimes.
Experience securing integration touchpoints, including API gateway security, policy enforcement, rate-limiting, and payload validation in SAP Integration Suite or enterprise API Management platforms.
Experience securing message brokers and event mesh systems (such as Advanced Event Mesh, Apache Kafka, or Solace PubSub+).
Experience translating compliance and security requirements into actionable engineering controls.
Experience collaborating with multi-functional product and engineering teams to drive security initiatives.
Other: SAP BTP Certification (such as Administrator, Security, Technology Consultant, or related).
As a Cloud Platform Security Engineer, you will define baseline security controls, governance frameworks, and secure reference architectures that enable development teams to adopt cloud technologies safely. You will work closely with functional, technical, and security stakeholders to translate complex compliance requirements into automated engineering controls, ensuring a secure, compliant, and resilient cloud platform ecosystem.
Description
This role is responsible for designing, implementing, and maintaining robust security controls across SAP BTP and hybrid cloud runtimes. You will author secure reference architectures, trust-boundary diagrams, and network security topologies to safeguard enterprise integrations and microservices. Additionally, you will partner with cross-functional teams to automate security testing, support compliance audits, and drive platform security optimization.","responsibilities":"Design and implement baseline security controls, encryption strategies (at rest and in transit), and secrets management standards across Cloud Foundry, Kyma, and multi-cloud runtimes.
Develop and maintain secure reference architectures, trust-boundary diagrams, network security zones, and traffic flow models for enterprise integrations and microservices.
Partner with cross-functional stakeholders to define API security policies, rate-limiting rules, and data architecture security standards.
Embed robust security controls and automated compliance mechanisms into platform designs to minimize risk.
Build proofs-of-concept (PoCs) and rapid prototypes to demonstrate the feasibility of emerging security and cloud technologies.
Support internal and external compliance audits, risk assessments, and vulnerability remediations.
Drive ongoing platform optimization, elevating system reliability and cloud security standards across the ecosystem.
Preferred Qualifications
Experience defining and enforcing enterprise SAP security governance frameworks, secure API policies, and data classification standards.
Experience with DevSecOps practices, including integrating automated security testing (SAST/DAST, dependency scanning, secret detection) into CI/CD pipelines and SAP Cloud Transport Management (CTMS).
Experience implementing cloud observability and monitoring tools (e.g., Dynatrace, SAP Cloud ALM, Prometheus, Grafana, or Splunk) for audit logging and security event detection.
Experience applying zero-trust architecture principles and secure network topology designs across hybrid (on-premises to public cloud) infrastructures.
Minimum Qualifications
Education: Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, Software Engineering, or equivalent practical experience.
Experience (5+ years) in software engineering or cybersecurity, with a focus on designing, securing, and operating enterprise cloud platform solutions.
Experience implementing secure configurations on the SAP Business Technology Platform (BTP) ecosystem, including application development/extension on Cloud Foundry or Kyma runtimes.
Experience securing integration touchpoints, including API gateway security, policy enforcement, rate-limiting, and payload validation in SAP Integration Suite or enterprise API Management platforms.
Experience securing message brokers and event mesh systems (such as Advanced Event Mesh, Apache Kafka, or Solace PubSub+).
Experience translating compliance and security requirements into actionable engineering controls.
Experience collaborating with multi-functional product and engineering teams to drive security initiatives.
Other: SAP BTP Certification (such as Administrator, Security, Technology Consultant, or related).
Additional Information
- Posted: 24 days ago