Technical skills
AzureCloud platformsCybersecurity
Methods
Product thinkingProduct management
Role signals
Legal
About this role
Job Summary
We are looking for an experienced SAP BTP Security Consultant with strong expertise in Identity & Access Management (IAM), Authorization concepts, and SAP BTP security architecture . The ideal candidate will play a key role in designing, implementing, and managing secure access across SAP BTP environments and integrated SAP landscapes.
Key Responsibilities
- Design and implement SAP BTP Security architecture including Identity, Authentication, and Authorization mechanisms
- Configure and manage SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS)
- Define and maintain roles, role collections, and authorization concepts in SAP BTP
- Implement Single Sign-On (SSO) and federation with enterprise identity providers (Azure AD, Okta, etc.)
- Manage user lifecycle, provisioning, and access governance across BTP and integrated SAP systems
- Ensure compliance with security policies, audit requirements, and best practices
- Work closely with functional and technical teams for secure integrations across SAP and non-SAP systems
- Support security troubleshooting, audits, and vulnerability assessments
- Stay updated with SAP BTP security innovations and roadmap
Required Skills & Experience
- 5+ years of experience in SAP Security / GRC / IAM
- Hands-on experience with SAP BTP Security (IAS, IPS, Role Collections, Trust Configurations)
- Strong understanding of:
- Authentication & Authorization concepts
- OAuth, SAML, JWT, OpenID Connect
- Experience with SSO integrations (Azure AD / Okta / other IdPs)
- Knowledge of SAP ECC / S/4HANA Security concepts
- Experience in user provisioning and access control frameworks
- Good understanding of BTP services and integration architecture
Preferred Qualifications
- Experience with SAP GRC Access Control
- Exposure to Cloud Security principles
- SAP Certifications in BTP / Security (preferred but not mandatory)
- Experience working in global delivery environments