Cloud DevSecOps Engineer

Location: Belgrade, RS
Employment Type: Full-time
Work Model: Hybrid

Who we are

msg global solutions is a systems integrator, software development partner, and managed services provider focused on SAP solutions for multiple industries. Our services include strategies for accounting, finance, regulatory reporting, performance management, sustainability, customer experience, and IoT. Operating from offices across the globe and growing, we help clients achieve operational efficiency and improve decision-making capabilities. With deep industry knowledge, technical expertise, and a diverse range of perspectives, our people spark change and create innovative solutions to complex operational issues. Our goal is to create long-lasting client relationships built on trust and dependability.

msg global solutions is part of msg, an independent, international group of companies with more than 10,000 employees around the world.

What we do

The Analytics Business Unit provides consulting, implementation, training, architecture, and installation services for profitability and sustainability management based on SAP’s analytics solutions SAP Analytics Cloud (SAC), PaPM, Sustainability Control Tower (SCT), Data Warehouse Cloud (DWC) and others. We co-develop the SAP PaPM application and content packages providing standard functionality for various use cases and industries. Our team combines functional, technical, and industry expertise on cost allocations, financial planning/budgeting, intercompany transfer pricing, product/service costing, IT costing, tax calculations, funds/liquidity transfer pricing, cost-to-serve, planning simulation, and sustainability. We help our clients in many industries across the globe become more profitable and sustainable, increase operational transparency and control, and create a better basis for decision-making. We are a global, diverse, and inspiring team and offer the opportunity to extend personal and professional capabilities, by working for a leading strategic SAP partner.

What will you do?

• Define and implement security for our cloud applications on SAP BTP
• Be responsible for all security relevant aspects of our cloud applications - test tools, runtime and operations
• Discuss cloud application security with our management and with SAP
• Automate static security testing
• Secure web and cloud applications based on SSL/TLS, mTLS, OIDC, SAML2 and OAuth2
• Perform coding work
• Implement security review processes

What experience should you have?

• At least two years of experience in implementing security for SaaS and PaaS
• University degree in information technology, informatics or equivalent is beneficial
• Familiarity with the majority of the following:
• Bitbucket pipelines, Jenkins or comparable tools
• SSL/TLS, DNS, mTLS, ssh, TCP/IP
• OAuth2, OIDC, SAML2, Azure AD, Keycloak, Vault
• Checkmarx, Fortify, Findbugs, Whitesoure/Mend, Blackduck, Snyk, CVEs
• Docker Security, K8S
• SAP BTP
• OWASP
• GDPR and SOC Compliance
• Understanding of Node.js applications
• Strong hands-on attitude and try-harder mindset
• Professional fluency in English, knowledge of German is a plus

What we offer

• ​A place where individuals are equally valued and where diversity and cultural differences are cherished.
• A global team of highly respected SAP and industry experts where you can make a difference.
• Competitive salaries and a broad range of benefits, some of which are private health insurance, flexible working, employee sports and wellbeing benefits, gift vouchers etc.