CI/CD Engineer (Security / Quality Tools)

Experience

3+ Yrs

Base Location

Germany | DE

Work Location

Walldorf/Remote

Grade (applicable to internal Candidates)

B

Are we open to considering candidates from other locations?

Checking with Client

Is it a remote working? Yes

Do you have any specific location preferences or constraints?

Checking with Client

Request Title

CI/CD Engineer (Security / Quality Tools)

Start Date

02-10-2025

End Date

31-12-2026

Hours for Estimated Spend

1

Description

Organizational purpose and objectives
At the global unit Customer and Partner in the Corporate Processes and Information Technology (CPIT) organization part of the Strategy & Operations board area, we strive to provide a seamless and superior experience across all SAPs customer-facing IT solutions. Examples of these include SAP.com, the SAP ONE Support Launchpad, the Cloud Availability Centre as well as most recently the SAP for Me project.

Project
The goal of the SAP for Me project is to provide a central platform to enable an easy and intelligently guided digital companion for the interaction between our customers and SAP. The scope of SAP for Me spans across various areas of customer interests including the communication from SAP to customers (e.g. provisioning or outage notifications), increased insight for our customers into their software portfolio across all Lobs (e.g. availability, contracts, licenses), customer-specific knowledge provisioning as well as what we call opportunities (i.e. recommendations for innovative products, suggested trials, relevant learnings).

Positions Requested

1

Experience level

Application Consulting - E3 - Project Manager (SAP Experience 3+ years)

Scope of Services / Deliverables

CI/CD Engineer (Security / Quality Tools)

We are looking for a CI/CD Engineer to set up Open-Source Security (OSS) Scanning as well as Testing for Functional Correctness with SonarQube.

Make a proposal for an OSS security scanning tool that meets company requirements for security and compliance as well as boundary conditions of SAP for Me
Create and maintain needed CI/CD pipelines for chosen OSS Tool and SonarQube
Set-up chosen OSS Tool in a way that only application relevant findings are reported for the respective repositories (in contrast to platform related findings); integrate Quality Gates for Pipeline Blocking
Configure SonarQube so that it is running in Frontend and Backend and enforcing Quality Gates by blocking builds that do not meet specified criteria
Ensure that both OSS Tool and SonarQube are functioning correctly and troubleshoot any issues that may arise in the Enablement phase.
Ensure Knowledge Transfer and provide documentation for maintenance purposes
Support the teams with the Tools onboarding (both from a technical and how it works perspective)

Skills

Strong background in integrating security & quality tools
Experience with setting up Security Testing Tools (especially OSS Tools)
Experience with the integration of code coverage analytical tools (especially SonarQube)
Experience with Black Duck and other common OSS Tools such as Mend etc.
Experience with Black Duck Binary Analysis
Experience with GitHub Actions, Tekton
Experience with containerization technologies such as Docker
Experience with Kubernetes
Ideally Experience with Software bill of materials (SBOM) files
Familiarity with best practices related to automated testing
Strong problem-solving and troubleshooting skills
Very good communication skills in the interaction with colleagues from other units (clarification of technical prerequisites, evaluation of technical options)

Work delivery location (Country)

Germany | DE

Work delivery location (City)

Walldorf/Remote