Job Summary

We are looking for an experienced SAP BTP Security Consultant with strong expertise in Identity & Access Management (IAM), Authorization concepts, and SAP BTP security architecture. The ideal candidate will play a key role in designing, implementing, and managing secure access across SAP BTP environments and integrated SAP landscapes.

Key Responsibilities

• Design and implement SAP BTP Security architecture including Identity, Authentication, and Authorization mechanisms
• Configure and manage SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS)
• Define and maintain roles, role collections, and authorization concepts in SAP BTP
• Implement Single Sign-On (SSO) and federation with enterprise identity providers (Azure AD, Okta, etc.)
• Manage user lifecycle, provisioning, and access governance across BTP and integrated SAP systems
• Ensure compliance with security policies, audit requirements, and best practices
• Work closely with functional and technical teams for secure integrations across SAP and non-SAP systems
• Support security troubleshooting, audits, and vulnerability assessments
• Stay updated with SAP BTP security innovations and roadmap

Required Skills & Experience

• 5+ years of experience in SAP Security / GRC / IAM
• Hands-on experience with SAP BTP Security (IAS, IPS, Role Collections, Trust Configurations)
• Strong understanding of:
• Authentication & Authorization concepts
• OAuth, SAML, JWT, OpenID Connect
• Experience with SSO integrations (Azure AD / Okta / other IdPs)
• Knowledge of SAP ECC / S/4HANA Security concepts
• Experience in user provisioning and access control frameworks
• Good understanding of BTP services and integration architecture

Preferred Qualifications

• Experience with SAP GRC Access Control
• Exposure to Cloud Security principles
• SAP Certifications in BTP / Security (preferred but not mandatory)

Experience working in global delivery environments