Senior SAP Developer with a focus on Security

Company: RCM Technologies
Location: Berlin
Posted on: September 26, 2022

Job Description:

Job Title: IT Application Security Architect SAP Solution Architect (Senior)Job Function: SAP Development - ABAP & JAVA with knowledge, strong understanding of Security and an ability to detect when someone has written code that presents security risks, and can mitigate that riskJob Type: Contract - Full timeLocation: Fully RemoteScope of JobThe IT Application Architect SAP Solution Architect (ITAA-SAP) is an experienced person who will work with IT to support business units across the enterprise using SAP technologies. As a member of the IT team, the ITAA-SAP's purpose is to help ensure the security, confidentiality, integrity, and availability of the client ecosystem. You can succeed by working closely and overcommunicating with project teams across the agile train, business groups, and the IT security teams. It is the ITAA-SAP's responsibility to ensure effective remediation or controls around findings in web applications and data for our initiatives. The ITAA-SAP will need the ability to be efficient working alone across multiple application teams.Primary ResponsibilitiesAll ITAA-SAP's will, under the guidance of a Lead Application Security person, be responsible for actively reviewing and following existing security policies, procedures, and standards, as they relate to application security. As an ITAA-SAP, you will need to cultivate a culture of security awareness and continued education of personnel to ensure security policies are consistently adhered to. The application security team will work with the leading project individuals to identify, assess, remediate, or control risks related to application security. You will need to conduct individual security code reviews, pipeline automation, and scripting of security tools as is necessary in existing system architecture. You must have a solid understanding of SAP protocols, authentication, authorization, and general application security requirements.Knowledge and understanding of SAP GUI and S/4 HANA coupled with deep knowledge of ABAP code, constructs and architecture is needed in order to successfully participate in complex code reviews and provide constructive feedback to developers. The role includes working with Architects, Analysts, and other IT delivery teams, representing Security and ensuring appropriate attention to security issues and concerns. Also, providing technical input to projects delivering SAP changes to support initial project planning and estimation processAs an ITAA-SAP you will work with Lead Application Security personnel to evaluate, recommend, design, and implement application security solutions increasing our application security posture and reducing application threat surfaces. You will need excellent written and verbal communication skills along with business acumen and an enterprise outlook to interact with a broad cross-section of personnel explaining and enforcing security measures. The ITAA-SAP may be expected to engage with third party vendors for tools to evaluate, improve and automate daily processes for the security team. Each ITAA-SAP will perform tasks in support of the current IT Security Roadmap and may be responsible for the intake, development, assessment, and management of new or existing tools.Required QualificationsExperience with auditing application and system architecturesA minimum of 10+ years of SAP enterprise full stack ABAP developmentContinuous learning on the job to keep up with a fast paced ever changing fieldKnowledge of SAP new dimension products and current security standards and practicesMinimum 3+ years of code review experienceGeneral knowledge of security aspects across these areas:o Database securityo SAP authentication and authorizationo SAP encryption key managemento SAP server configuration and hardeningo Auditing of information security subject areaso ABAP repository, WorkBencho CICD pipelines, automationDesired QualificationsAbility to read and understand code (Java, JavaScript, HTML, CSS)2+ years of SAP Java experienceFamiliarity with one or more: OWASP, SANS, NIST, ISO27001, and/or COBIT 5Experience in information and IT risk management with a focus on security, performance, and reliabilityEducation & CertificationsBachelor's degreeCertification (SAP, SABSA, CISSP, etc.) in topics the address security directly is preferred.SAP S4 HANA Developer CertificationsFamiliarity with: Onapsis or SAP CVABe prepared to answer questions in the following domains during Interview:o Security: principles, data access, encryption, SAP Roleso Database: HANA S4 structure, data organization and optimizationo Programming: development techniques to facilitate testing, advanced constructso SAP GUI, Fioreo ABAP Webdynpro Model generation (RFC, Web Services)o Internal/External Context Mappingo Eventing, Navigation, Adaptive RFC, Custom Comps, Interfaces, and Usageo Net Weaver Development Interface (NWDI Tracks, SCs, DCs)o Floor Plan Manager (FPM)About RCM:RCM IT & Life Sciences is a leading provider of IT Business Solutions and Engineering Services to over 1,000 clients in the commercial and government sectors. RCM partners with clients to define implement and manage a broad range of technologies across multiple platforms, systems, and networks. Our broad geographic presence ensures that a proven and reliable tactical and strategic capability is available and deployable virtually everywhere in North America.Equal Opportunity StatementRCM is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.DisclaimerThis job description is intended to describe the general nature and the level of the work being performed by the people assigned to this position. It is not intended to include every job duty and responsibility specific to the position. RCM reserves the right to amend and change responsibilities to meet business and organizational needs as necessary.

Keywords: RCM Technologies, New England , Senior SAP Developer with a focus on Security, Professions , Berlin, Northeast