IAG SAP Security

Job Title: IAG SAP Security

Location:
Painted Post, NY (Remote)
full- time (Permanent role)/Contract Role

Job Description:

• Design, configure, and maintain SAP Identity Access Governance (IAG) integrating it with Success Factor / Identity Access Services for user hire-to-retire.
• Manage end-to-end integration and provisioning flows between SAP Cloud Identity Services (IAS/IPS) and target cloud/on-premise applications (e.g., SAP S/4
  
  HANA, Success Factors, Ariba).
• Support and optimize bridge scenarios between SAP GRC Access Control (AC) on-premise and SAP IAG cloud solutions using hybrid landscape architectures.
• Lead daily operational support, troubleshooting provisioning failures, system connection errors, job scheduling issues, and synchronization bottlenecks within IAG and IAS/IPS.
• Design, update, and maintain business roles and technical roles across various SAP cloud environments while ensuring strict alignment with least-privilege principles.
• Configure and maintain the IAG Risk Analysis engine, incorporating custom SoD rulesets and mitigating controls tailored to organizational risk appetites.
• Manage user lifecycle events (onboarding, offboarding, transfers) within SAP Cloud Identity Authentication (IAS) and Identity Provisioning (IPS), including custom attribute mappings and transformations.
• Perform standard SAP Security operations, including user administration, role maintenance (PFCG), and troubleshooting authorization issues in core SAP S4 systems. Will require deep understanding of Fiori catalogs and pages /spaces /groups.
• Participate in stakeholder meetings and provide SAP security solutions for S4 deployments across the globe.
• Collaborate with audit and compliance teams to facilitate periodic user access reviews (UAR) and SoD remediation activities utilizing IAG Access Certification.
• Investigate and resolve complex access issues and security incidents raised through IT service management (ITSM) tools within defined SLA timelines.
• Develop and maintain comprehensive technical documentation, including standard operating procedures (SOPs), system architecture diagrams, and configuration guides.
• Apply, test, and validate SAP notes, patches, and quarterly cloud upgrades related to SAP IAG, IAS, IPS, and GRC components to ensure operational continuity.
• Configure authentication methods in IAS, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and conditional authentication policies for diverse user groups.
• Optimize IPS source, target, and proxy system transformations using JSON to ensure precise data filtering and attribute synchronization across systems.
• Provide hypercare and regular knowledge transfer to junior security administrators and internal IT support teams regarding SAP cloud governance best practices.