Security Engineer (IAM, Cloud, XSS/CSRF, SAP BTP HANA) (m/f/d)
- REMOTE
- Start: 16.09.2026
- 10 hours ago
- Job type:
- Project
- Duration:
- 10 months + option
- Scope of work:
- full-time
- Languages:
- English
ID: 179828
Westhouse is one of the leading international recruitment agencies for the procurement of highly qualified experts in fields such as IT lifecycle management, SAP, engineering, commerce and specialist consultancy.
For our client we are currently looking for a Security Engineer (IAM, Cloud, XSS/CSRF, SAP BTP HANA) (m/f/d) - REMOTE.
Your tasks
- Support security and observability initiatives for FinOps Insights
- Implement and enhance Identity & Access Management (IAM)
- Develop and implement authentication and authorization concepts
- Secure applications against injection, XSS and CSRF
- Implement strong authentication standards such as X.509, OAuth 2.0, Bearer Authentication and mTLS
- Work with cryptography, secrets management, certificate handling, encryption, Vault integration and key rotation
- Implement secure service-to-service communication using TLS/mTLS
- Apply security best practices in Kubernetes, Gardener and Kyma environments
- Support cloud and container security initiatives
- Conduct security reviews and support security remediation activities
- Handle security-related incidents and troubleshooting
- Support documentation, knowledge transfer and continuous improvement
- Contribute to Central Observability under CTB-1774 and other prioritized development and operational activities
- Support HANA Cloud-related security topics and role management
Share posting
Your qualifications
- Solid software engineering and cloud-native application development experience
- Hands-on experience with Identity & Access Management (IAM)
- Strong application security expertise
- Experience with authentication and authorization concepts
- Practical experience with cryptography, secrets management, certificate handling, encryption and key rotation
- Experience with Vault integration
- Hands-on experience with TLS/mTLS and secure service communication
- Experience with Kubernetes security
- Experience with Gardener and Kyma security
- Understanding of cloud and container security concepts
- Experience with security remediation and security best practices
- Hands-on experience with HANA Cloud is a strong advantage
- Knowledge of SAP BTP HANA Cloud, SAP Access Request Management (ARM), CIS and CAM is beneficial
- Experience with role-based authorization and HANA Cloud role management is beneficial
- Sofia is the preferred location, but candidates from Germany and other EMEA countries can be considered