SAP IAG IAM Consultant - up to £90,000 + Benefits + Bonus

SAP IAG IAM Consultant
Salary: £80,000 to £90,000 + Benefits + Bonus
Location: London
Working Pattern: Hybrid
Job Type: Permanent
Working Hours: 40 hours per week, Full Time

A globally recognised technology organisation is looking for an experienced SAP IAG IAM Consultant to join its team, working across complex enterprise SAP transformation programmes.
This is a hands on position focused on SAP Identity Access Governance, SAP Security and Identity & Access Management, covering the implementation and configuration of SAP IAG across S/4

HANA, ECC and cloud environments.

The SAP IAG IAM Consultant will work across access governance, SAP authorisations, Segregation of Duties, role management, user provisioning and integrations, with exposure to complex automotive and manufacturing environments.

• Implement and configure SAP Identity Access Governance (IAG) capabilities including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP).
• Support SAP IAG deployments across S/4
  
  HANA, ECC and cloud applications.
• Perform Segregation of Duties (SoD) analysis, identifying access risks and compliance violations.
• Configure and maintain risk rulesets and mitigation controls.
• Design and maintain business roles, technical roles, role hierarchies and SAP authorisations.
• Manage user provisioning and de-provisioning, access requests and approval processes.
• Integrate SAP IAG with SAP IAS, SAP IPS, SAP GRC and wider cloud applications.
• Support integrations with third party IAM platforms such as SailPoint using connectors and APIs.
• Configure multi-level and risk-based access approval workflows.
• Support identity federation and cloud connectivity.
• Perform unit and integration testing and provide support throughout UAT.
• Manage configuration transports and support production deployments.
• Produce functional and technical documentation covering access governance, roles and access control standards.

• Strong hands on experience with SAP Identity Access Governance (IAG).
• Experience across ARA, ARM, EAM and RDP.
• Strong understanding of SAP authorisations, including roles, profiles, objects, user administration and access controls.
• Experience with SAP S/4
  
  HANA and/or ECC Security.
• Strong knowledge of Segregation of Duties (SoD), risk analysis and mitigation.
• Experience configuring and maintaining risk rulesets.
• Strong understanding of Identity & Access Management (IAM), including joiner, mover and leaver processes.
• Knowledge of Role Based Access Control (RBAC).
• Hands on experience with SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
• Experience integrating SAP IAG with SAP applications and cloud systems.
• Experience configuring access request workflows, including multi-stage and risk-based approvals.
• Strong communication, stakeholder management and problem solving skills.
• Experience working within Agile or Scrum environments.

• Experience working across hybrid SAP GRC and SAP IAG landscapes.
• Experience supporting complex multi-system SAP environments.
• Knowledge of ABAP and SAP Fiori/UI5.
• Familiarity with APIs and automation.
• Experience integrating SAP IAG with SailPoint or other third party IAM technologies.
• Knowledge of SOX, GDPR and ISO 27001.
• Experience supporting audit and governance activities.
• SAP Security, SAP IAG or SAP GRC certifications.
• CISA or CISSP certification would be advantageous.

• £80,000 to £90,000 salary plus a comprehensive benefits package.
• Hybrid working from London.
• Work on complex, enterprise scale SAP transformation programmes.
• Gain extensive exposure across SAP IAG, S/4
  
  HANA, IAS, IPS, GRC and IAM.
• Work across both SAP and wider identity technologies, including third party IAM integrations.
• Develop your expertise across SAP security, access governance and cloud identity.
• Long term professional development and career progression within a global technology environment.