SAP Security Engineer

Responsibilities

• Design, configure, and maintain secure access controls and segregation of duties (SoD) policies using SAP Identity Access Governance (IAG) and SAP Cloud Identity Services (IAS/IPS).
• Partner with infrastructure and cloud engineering teams to secure SAP landscapes (such as SAP S/4
  
  HANA, BTP, and RISE with SAP) hosted on public cloud platforms.
• Implement and optimize user provisioning, single sign-on (SSO), multi-factor authentication (MFA), and federated identity flows between SAP systems, public clouds, and enterprise identity providers (e.g., Microsoft Entra ).
• Conduct regular vulnerability assessments, security audits, and configuration reviews of public cloud SAP infrastructure and database layers (HANA security).
• Translate corporate cybersecurity requirements into concrete SAP security baselines, ensuring compliance with internal policies and external regulatory standards (e.g., SOC 2, ISO 27001).
• Define, build, and audit SAP business roles, authorization objects, and emergency access management (Firefighter) procedures to maintain a least-privilege security posture.
• Act as the subject matter expert for SAP-related security incidents, assisting in rapid investigation, forensic analysis, and the implementation of permanent remediation measures.
• Work closely with SAP functional teams, enterprise GRC analysts, cloud architecture teams, and external integration partners to ensure secure-by-design SAP deployments.

• Minimum of 3–5 years of dedicated experience in SAP Security, including hands‑on experience with SAP GRC or SAP Identity Access Governance (IAG).
• Experience securing SAP workloads deployed in public cloud environments, including strong understanding of cloud infrastructure security, network security groups, and IAM policies.
• Practical experience implementing and configuring SAP Cloud Identity Services (Identity Authentication / Identity Provisioning) and enterprise IAM solutions.
• Deep technical knowledge of SAP security architectures, authorization objects, role design (single, composite, and derived roles), and segregation of duties (SoD) analysis.
• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent relevant work experience.

• SAP Certified Technology Associate – SAP System Security and Authorizations, or cloud‑specific security certifications.
• Hands‑on experience with SAP Business Technology Platform (BTP) security configurations and RISE with SAP compliance frameworks.
• Experience in highly regulated industries such as Renewable Energy, Automotive, or manufacturing operations.
• Experience configuring SAP Enterprise Threat Detection (ETD) or integrating SAP security logs with enterprise SIEM platforms (e.g., Microsoft Sentinel, SCC, Elastic).

Demonstrates expertise in SAP Cloud Security and Governance, with a strong focus on Identity and Access Management (IAM) and compliance monitoring. Proficient in implementing security measures for SAP workloads in public cloud environments, ensuring adherence to regulatory standards.