Tech Lead – Infrastructure and SAP Cloud Specialist

• Participate in SAP ECC to SAP S/4HANA conversion projects.
• Manage VPNs with customers in Brazil and abroad, including site-to-site IPsec and remote access, with segmentation and isolation between customers.
• Define, implement, and audit firewall rules, access policies, and server hardening standards.
• Provision and administer machines and networks in Azure, AWS, and other hyperscalers, including VNets/VPCs, NSGs/Security Groups, load balancers, and DNS.
• Provide infrastructure support for SAP environments, including sizing, SAProuter, SAP Cloud Connector, connectivity with BTP/RISE, and integration with the Basis team.
• Automate infrastructure using IaC (Terraform, Bicep, or CloudFormation) and scripts (PowerShell, Bash, or Python).
• Maintain backup, disaster recovery, monitoring, and incident response capabilities.
• Manage identity and access: Entra ID/AD, IAM, MFA, and the principle of least privilege.
• Support the maintenance of ISO 27001 certification, including controls, evidence, risk management, and audits; ensure compliance with Brazil’s LGPD and the GDPR.
• Optimize cloud costs through FinOps and document architecture and procedures.

• Infrastructure knowledge...
• Advanced to fluent English and/or Spanish.
• Strong knowledge of infrastructure and public cloud platforms (Azure and AWS).
• Strong experience with VPNs, firewalls (FortiGate, Palo Alto, Check Point, or similar), and networking (TCP/IP, routing, NAT, VLANs).
• Experience working with SAP environments in the cloud.
• Experience with security controls and ISO 27001 audits.
• Experience with SAP S/4HANA conversion projects.
• AWS Certified Solutions Architect (Associate or Professional).
• Microsoft Azure Administrator (AZ-104).
• AWS Security Specialty, Azure Security Engineer (AZ-500), and Azure Solutions Architect (AZ-305) certifications are desirable.
• ISO/IEC 27001 Lead Implementer or Lead Auditor certifications are desirable.
• Firewall vendor certifications (NSE, PCNSE) and CCNA/CCNP are desirable.
• Knowledge of GCP or OCI.
• Experience with SAP HANA, RISE with SAP, or migrations to S/4HANA.
• Experience with SIEM/XDR (Sentinel, GuardDuty, Defender) and PAM.

• 12 days of paid time off every 12 months.