SAP Joule AI Security Architect

Started in 2006 and headquartered in Connecticut, VLink is one of the fastest growing digital technology services and consulting companies. Since its inception, our innovative team members have been solving the most complex business, and IT challenges of our global clients.

Hands-on security architecture role responsible for the security posture of Joule deployments — access control, data governance, and risk — working directly with the business and IT to clear use cases for POC and production.

• Define and implement security architecture for Joule deployments, including authentication, authorization, and role-based access
• Design role-based access controls, least-privilege access, segregation of duties (SoD), and privileged/emergency access processes for AI administrators, developers, business users, and service accounts
• Assess data sensitivity and enforce data governance controls for each Joule use case
• Define controls to prevent unauthorized data exposure through prompts, AI agents, and integrations, and review AI use cases for data leakage and privacy concerns
• Partner with GRC to map Joule skills and access against governance, risk, and compliance requirements
• Define and maintain SAP AI security policies, standards, and governance frameworks, including approval and review processes for AI use cases before production deployment
• Perform hands-on security reviews and risk assessments for each POC prior to business rollout
• Conduct security reviews of custom AI agents, establish secure development lifecycle requirements, and define testing procedures for AI agent deployment and production release
• Design and implement monitoring, logging, and audit trails for Joule usage
• Validate secure configurations of AI services, APIs, integrations, and connectors, and support vulnerability management and remediation activities for SAP AI solutions
• Drive security, observability, performance, compliance, and operational excellence standards for enterprise AI solutions across POC and production environments
• Work directly with business stakeholders to explain and resolve security requirements without slowing delivery
• Partner with the functional and technical roles throughout qualification, POC, and deployment
  
  Keep IT informed of security risks, exceptions, and remediation status
• Educate SAP teams on AI security risks and governance requirements, running workshops for developers, administrators, and business users, and developing guidance for secure prompt engineering and AI agent development
• Maintain security documentation and support internal and external audits

• Hands-on security architecture experience in enterprise SAP or cloud environments
• Experience with SAP GRC and access control frameworks
• 5+ years of SAP Security and GRC experience, including SAP S/4
  
  HANA Security, SAP GRC Access Control, and SAP Identity Services
• Familiarity with AI/copilot-specific security risks, such as data leakage and prompt-based access issues
• Knowledge of AI security principles, machine learning risks, generative AI technologies, and AI governance frameworks, with experience implementing them in enterprise environments
• Experience with SAP BTP security model and Integration Suite security
• Experience securing cloud-native AI platforms using SAP BTP, SAP AI Core, Kubernetes, hyperscalers, Dev Sec Ops  practices, observability controls, and distributed system security patterns
• Familiarity with MCP Server environments hosted on SAP BTP, and the security implications of SAP AI Core, SAP AI Hub, and SAP AI Gateway integrations
• Experience with SAP…