Description

You will own the security architecture and implementation for SAP BTP environments, focusing on Identity and Access Management (IAM), authentication, and authorization models.

This role is on-site.

Responsibilities

• Design and implement security architecture for SAP BTP, including IAM, authentication, and authorization models.
• Configure and manage SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
• Establish trust between SAP IAS and Microsoft Azure AD or other Identity Providers (IdPs).
• Monitor and remediate vulnerabilities in SAP BTP environments to ensure compliance with security guidelines.

Required Skills

• Minimum 5+ years of SAP security experience, including at least 2 years specifically in SAP BTP security.
• Hands-on configuration of SAP IAS trust with Azure AD and other IdPs, including multi-IdP setups.
• Expertise in IAS integration with SAP SuccessFactors and Joule, including conditional authentication rules.
• Implementing user provisioning via IPS to SAP on-premise and Cloud applications (e.g., Ariba, SuccessFactors).
• Configuring Role Collections for BTP services, including Group-to-Role Collection mapping and platform role management.
• Designing custom transformation rules in IPS for attribute mapping, filtering, and complex user lifecycle scenarios.
• Integrating IPS with non-SAP systems using SCIM or REST APIs.
• Proficient in OAuth, SAML, and OIDC protocols for secure authentication mechanisms.

Key Skills

Education

Any Gradute