Tech Lead – Infrastructure and SAP Cloud Specialist

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Engage in conversion projects from SAP ECC to SAP S/4HANA.

• Oversee VPN management for clients in Brazil and internationally, ensuring site-to-site IPsec and remote access with appropriate segmentation and isolation.

• Establish, implement, and review firewall regulations, access policies, and standards for server hardening.

• Provision and manage cloud resources in Azure, AWS, and other hyperscalers, including VNets/VPCs, NSGs/Security Groups, load balancers, and DNS.

• Offer infrastructure support for SAP environments, covering sizing, SAProuter, SAP Cloud Connector, connectivity with BTP/RISE, and collaboration with the Basis team.

• Automate infrastructure processes utilizing Infrastructure as Code (IaC) tools such as Terraform, Bicep, or CloudFormation, alongside scripting languages like PowerShell, Bash, or Python.

• Ensure maintenance of backup, disaster recovery, monitoring, and incident response capabilities.

• Manage identity and access protocols, including Entra ID/AD, IAM, MFA, and adhere to the principle of least privilege.

• Assist in sustaining ISO 27001 certification by managing controls, documenting evidence, handling risk management, and conducting audits; ensure adherence to Brazil’s LGPD and GDPR regulations.

• Enhance cloud cost efficiency through FinOps and maintain documentation of architecture and procedures.

⛳️ Requirements

• Proficient understanding of infrastructure concepts.

• Advanced to fluent proficiency in English and/or Spanish.

• In-depth knowledge of public cloud platforms, specifically Azure and AWS.

• Extensive experience with VPNs, firewalls (such as FortiGate, Palo Alto, Check Point, or similar), and networking protocols (TCP/IP, routing, NAT, VLANs).

• Familiarity with managing SAP environments in the cloud.

• Experience with security controls and conducting ISO 27001 audits.

• Background in SAP S/4HANA conversion projects.

• AWS Certified Solutions Architect (Associate or Professional) certification.

• Microsoft Azure Administrator (AZ-104) certification.

• Additional certifications such as AWS Security Specialty, Azure Security Engineer (AZ-500), and Azure Solutions Architect (AZ-305) are preferred.

• Certifications like ISO/IEC 27001 Lead Implementer or Lead Auditor are desirable.

• Certifications from firewall vendors (NSE, PCNSE) and CCNA/CCNP are also beneficial.

• Understanding of GCP or OCI is advantageous.

• Experience with SAP HANA, RISE with SAP, or migrations to S/4HANA.

• Familiarity with SIEM/XDR tools (such as Sentinel, GuardDuty, Defender) and PAM is a plus.

🏝️ Benefits

• 12 days of paid time off every 12 months.