(Senior) IT Risk Specialist - Secrecy IT Infrastructure (SITI) (f/m/d)

We help the world run better. At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

What you’ll build

SAP SS&D (Sovereign Services & Delivery) is looking for an IT Risk Specialist – Secrecy IT Infrastructure (SITI) (f/m/d) to operate and further develop the SITI infrastructure at our Walldorf location.

In this role, you will be responsible for the secure operation and risk‑compliant management of the local SITI environment, including the on‑site Micro Data Center. This includes managing and maintaining the hardware infrastructure, performing preventive maintenance and troubleshooting, and applying regular updates and security patches to ensure a compliant and stable system landscape. You will also be responsible for the provisioning, rollout, and support of VS‑TOPS (classified client systems) at the site.

Your tasks will involve both strategic and hands‑on responsibilities: from installing and configuring systems, virtualization, and hardware lifecycle management, to ensuring compliance with relevant IT security, physical protection, and regulatory requirements—especially in the context of German classified environments (VS‑NfD).

You will support and further develop key infrastructure components, contribute to continuous improvements, and serve as the primary contact for all SITI‑related operations at the Berlin site. Your work directly supports secure development and delivery capabilities for public sector and regulated industry customers, helping SAP meet the highest confidentiality and compliance standards.

Your primary responsibilities will include

• Operating and extending technical and structural infrastructure components for highly secure environments, both for internal platforms and customer‑facing projects
• Supporting security accreditation processes and administrating relevant systems and security technologies
• Providing technical support for SAP processes related to the protection of government‑classified information, with a focus on upholding permanent confidentiality
• Acting as the local SITI contact and coordinating liaison with external IT service providers and technology partners
• Managing secure IT operations in close alignment with central SAP SS&D operations, especially for externally operated systems and providers in Walldorf and Berlin
• Administration and maintenance of virtualized environments (VMS) and support in setting up new virtual machines for classified operations
• Operation and management of Active Directory components and secure identity/access controls
• Managing backup and recovery operations using VEEAM to ensure high availability and data integrity
• Handling IT asset management, including lifecycle tracking and compliance for all secure devices
• Provisioning and support of VS‑TOPS (classified laptops) for users, including onboarding, maintenance, and troubleshooting
• Working with SIEM systems, ideally Splunk, to analyze logs, detect anomalies, and support incident response
• Administration and management of ECOS PKI/SMA appliances, ECOS Secure BootSticks
• Supporting the mitigation of IT security incidents and helping the business fulfill governmental regulatory requirements
• Enabling classified development projects by ensuring secure environments according to national and international secrecy requirements
• Starting your career in SAP SS&D by learning and applying the strict requirements for handling customer secrecy information, in collaboration with government authorities (e.g. multi‑/bilateral agreements and process handling)

What you bring

• Master’s degree (or equivalent) in IT, cybersecurity, or a related field. Alternatively, completed vocational training as an IT specialist (Fachinformatiker) with relevant professional experience
• 4+ years of relevant working experience in secure IT operations
• Proven knowledge of IT security frameworks and compliance standards, especially VS‑NfD, ISO 27001, and BSI IT‑Grundschutz
• Hands‑on experience with BSI‑certified IT security products (7164) and secure IT architectures for both on‑premise and cloud deployments
• Practical experience in operating and managing VS‑NfD environments, including understanding of related legal and procedural requirements
• Experience in setting up and maintaining virtualized environments (VMS)
• Administration of Active Directory (AD) and management of secure user identities
• Operation and maintenance of backup solutions, ideally using VEEAM
• Familiarity with IT asset lifecycle management within secure infrastructures (e.g. via Netbox)
• First experience in provisioning, rollout, and support of VS‑TOPS, ECOS Secure Boot Sticks and SecurePIM Application (classified client systems)
• First experience with SIEM systems, ideally Splunk, for log analysis, correlation, and incident response
• Strong organizational skills and the ability to manage complex operational tasks securely and independently
• A proactive, structured, and solution‑oriented working style
• Conduct guided tours of our VS‑NfD‑compliant infrastructure for stakeholders and customers
• Hands‑on experience with digital certificates, including Certificate Authorities (CAs) and the issuance, renewal, and lifecycle management of certificates
• Ability to coordinate effectively with internal teams and external service providers
• High awareness for confidentiality, integrity, and regulatory compliance in the handling of government‑classified information
• Excellent German and English communication skills, both written and spoken
• A collaborative, hands‑on mindset with strong interpersonal and communication skills

Where you belong

The SAP Sovereign Services & Delivery unit is part of the SAP Customer Services & Delivery Area and ensures strict liability fulfillment of customers’ national security requirements, business enablement in sensitive industries and compliance with Critical Infrastructure and Telecommunications Compliance for SAP world‑wide.

Bring out your best

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end‑to‑end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose‑driven and future‑focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion. SAP’s culture of inclusion, focus on health and well‑being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. We believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to the Guidelines for Ethical Usage of AI in the Recruiting Process.