We are seeking a Senior Network DevOps Engineer to oversee the network security layer and ingress configuration of SAP's internal SonarQube platform which operates on GCP and Kubernetes. This role involves managing GCP Cloud Armor policies DNS and firewall configurations and tuning Ingress NGINX while implementing abuse prevention strategies. The engineer will focus on proactive hardening through automated Cloud Armor rules and removing redundant configurations alongside reactive tasks such as addressing rate-limit false positives and tracing client IPs in proxy logs. All modifications must be validated on a test cluster prior to production deployment to ensure the availability and security of services used by thousands of developers across SAP. Effective documentation of security protocols network configurations and operational runbooks is also essential for this position.
