Job Summary

We are looking for an experienced SAP BTP Security Consultant with strong expertise in Identity & Access Management (IAM), Authorization concepts, and SAP BTP security architecture. The ideal candidate will play a key role in designing, implementing, and managing secure access across SAP BTP environments and integrated SAP landscapes.

Key Responsibilities

Design and implement SAP BTP Security architecture including Identity, Authentication, and Authorization mechanisms
Configure and manage SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS)
Define and maintain roles, role collections, and authorization concepts in SAP BTP
Implement Single Sign-On (SSO) and federation with enterprise identity providers (Azure AD, Okta, etc.)
Manage user lifecycle, provisioning, and access governance across BTP and integrated SAP systems
Ensure compliance with security policies, audit requirements, and best practices
Work closely with functional and technical teams for secure integrations across SAP and non-SAP systems
Support security troubleshooting, audits, and vulnerability assessments
Stay updated with SAP BTP security innovations and roadmap

Required Skills & Experience

5+ years of experience in SAP Security / GRC / IAM
Hands-on experience with SAP BTP Security (IAS, IPS, Role Collections, Trust Configurations)
Strong understanding of:
Authentication & Authorization concepts
OAuth, SAML, JWT, OpenID Connect
Experience with SSO integrations (Azure AD / Okta / other IdPs)
Knowledge of SAP ECC / S/4HANA Security concepts
Experience in user provisioning and access control frameworks
Good understanding of BTP services and integration architecture

Preferred Qualifications

Experience with SAP GRC Access Control
Exposure to Cloud Security principles
SAP Certifications in BTP / Security (preferred but not mandatory)

Experience working in global delivery environments

SAP BTP Consultant