Description

Key Responsibilities:

• SAP BRIM Security Architecture: Design, build, and maintain role-based access control (RBAC) across the SAP BRIM landscape, including Subscription Order Management (SOM), Convergent Charging (CC), Convergent Invoicing (CI), and Contract Accounting (FI-CA).
• Segregation of Duties (SoD) & Compliance: Define, analyze, and enforce SoD matrices tailored for subscription-to-cash processes; conduct regular access risk analyses (ARA) using SAP IAG Access Analysis Service.
• SAP IAG Deployment & Administration: Configure and manage SAP Cloud IAG modules—including Access Request Service (ARS), Access Analysis Service (AAS),  Access Certification Service (ACS), and Privileged Access Management (PAM).
• Cloud & Hybrid Identity Integration (SAP CIS): Configure SAP Cloud Identity Services, leveraging Identity Authentication Service (IAS) for SSO/MFA and Identity Provisioning Service (IPS) to synchronize identities and authorizations across SAP BTP, S/4HANA, and non-SAP solutions.
• Privileged Access & Emergency Management: Implement and oversee emergency access workflows (Firefighter/PAM) across BRIM and cloud systems to ensure emergency activity logging and review compliance.
• User Lifecycle Management: Automate user onboarding, role assignments, changes, and offboarding across cloud and on-premises systems using SAP IAG and IPS workflows.
• Audit Support & Access Recertification: Execute periodic user access certifications (UAC) via IAG, generate audit-ready compliance reports, and interface with internal/external auditors to ensure compliance

 
Required Qualifications & Experience

• Total Experience: 8–10+ years of dedicated SAP Security and GRC/IAG experience.
• Lead Experience: 3+ years in a Senior, Lead, or Architect capacity designing access controls, single sign-on (SSO), and governance models for enterprise SAP transformations.
• Domain Focus: At least 2 full-lifecycle S/4HANA Security & Fiori architecture and experience in SAP BRIM and 2+ deployment/migration projects involving SAP BTP, SAP Cloud Identity Services (CIS) and SAP IAG. Good to have exposure to FSM Preferred Skills
• Hands-on experience with cross-cloud identity federation using external IdPs like Microsoft Entra ID or Okta alongside SAP CIS.
• Familiarity with DevSecOps and automation tools (Python, PowerShell, Ansible, CI/CD pipelines) for SAP security deployments.
• Exposure to SAP Enterprise Architecture tools (Signavio, EAD) and Data Privacy frameworks (ILM, Read Access Logging, GDPR/CCPA)

Key Skills

Education

Any Graduate