About the role
Job Summary
We are looking for an experienced SAP BTP Security Consultant with strong expertise in Identity & Access Management (IAM), Authorization concepts, and SAP BTP security architecture. The ideal candidate will play a key role in designing, implementing, and managing secure access across SAP BTP environments and integrated SAP landscapes.
Key Responsibilities
- Design and implement SAP BTP Security architecture including Identity, Authentication, and Authorization mechanisms
- Configure and manage SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS)
- Define and maintain roles, role collections, and authorization concepts in SAP BTP
- Implement Single Sign-On (SSO) and federation with enterprise identity providers (Azure AD, Okta, etc.)
- Manage user lifecycle, provisioning, and access governance across BTP and integrated SAP systems
- Ensure compliance with security policies, audit requirements, and best practices
- Work closely with functional and technical teams for secure integrations across SAP and non-SAP systems
- Support security troubleshooting, audits, and vulnerability assessments
- Stay updated with SAP BTP security innovations and roadmap
Required Skills & Experience
- 5+ years of experience in SAP Security / GRC / IAM
- Hands-on experience with SAP BTP Security (IAS, IPS, Role Collections, Trust Configurations)
- Strong understanding of:
- Authentication & Authorization concepts
- OAuth, SAML, JWT, OpenID Connect
- Experience with SSO integrations (Azure AD / Okta / other IdPs)
- Knowledge of SAP ECC / S/4HANA Security concepts
- Experience in user provisioning and access control frameworks
- Good understanding of BTP services and integration architecture
Preferred Qualifications
- Experience with SAP GRC Access Control
- Exposure to Cloud Security principles
- SAP Certifications in BTP / Security (preferred but not mandatory)
Experience working in global delivery environments