TRCI-26-06644
SAP AI Engineer
This contract role will assess an existing local implementation and deliver a practical SAP BTP pilot that connects an MCP server securely to a knowledge graph, ABAP landscape, and approved LLM services. The core requirements are strong hands-on ABAP and SAP BTP delivery, practical Kyma and/or Cloud Foundry experience, XSUAA-based identity and access controls, secure integrations, and working knowledge of knowledge graphs, retrieval, RAG, and LLM context handling. The engineer is expected to build and troubleshoot the solution personally and prepare security artifacts and evidence that can pass formal architecture and security review. The structured experience range is 6–8 years; the description does not state a different experience band. The engagement is contract-based and lists Lisbon and Porto as locations, without specifying a country or work mode.
Position summary
- Location
- Portugal
- Workplace
- Hybrid
- Employment
- Contract
- Experience
- Minimum 6 years and Maximum 8 years
Role overview
Why This Role Matters.
This contract role will assess an existing local implementation and deliver a practical SAP BTP pilot that connects an MCP server securely to a knowledge graph, ABAP landscape, and approved LLM services. The core requirements are strong hands-on ABAP and SAP BTP delivery, practical Kyma and/or Cloud Foundry experience, XSUAA-based identity and access controls, secure integrations, and working knowledge of knowledge graphs, retrieval, RAG, and LLM context handling. The engineer is expected to build and troubleshoot the solution personally and prepare security artifacts and evidence that can pass formal architecture and security review. The structured experience range is 6–8 years; the description does not state a different experience band. The engagement is contract-based and lists Lisbon and Porto as locations, without specifying a country or work mode.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
Build working examples and reference implementations—not only architecture slides.
Implement the MCP server and connect it securely to the knowledge graph, ABAP landscape and approved LLM services.
Decide pragmatically when to use Kyma, Cloud Foundry, XSUAA and other existing SAP services.
Keep the design simple and minimise custom development wherever SAP capabilities can be reused.
Work directly with our ABAP, platform, data and security teams until the solution works in our environment.
Create a security concept that our security and architecture teams can review and approve.
Implement authentication, authorisation and role mapping with XSUAA and the relevant SAP identity services.
Ensure users can retrieve only the code, tickets and business data they are authorised to access.
Address prompt injection, data leakage, excessive tool permissions, secrets, logging, auditability and network security.
Prepare the required diagrams, data flows, threat model, controls and test evidence.
Join review sessions, answer technical questions and resolve findings until approval is achieved.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
SAP BTP
SAP Business Technology Platform
ABAP
SAP Kyma
Kyma
Cloud Foundry
XSUAA
SAP Identity Services
MCP
Model Context Protocol
LLM
large language models
RAG
retrieval-augmented generation
knowledge graph
retrieval
API integration
authentication
authorization
role mapping
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Strong hands-on ABAP development in large custom SAP environments
Practical SAP BTP delivery experience
Experience with Kyma and/or Cloud Foundry
XSUAA authentication, authorization, and role mapping
Secure integrations, APIs, or MCP-style tool interfaces
Working knowledge of knowledge graphs, retrieval, RAG, and LLM context handling
Ability to code, configure, troubleshoot, and demonstrate solutions hands-on
Experience taking enterprise solutions through architecture and security review
Clear communication with engineering, SAP architecture, and security stakeholders
Preferred
Nice to Have
There are no additional preferred qualifications for this position. If you meet the essential requirements, we encourage you to apply.
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for SAP AI Engineer
One page, about two minutes. We only ask for what we actually need to have a first conversation.