Senior SAP BTP Platform & Security Engineer - Remote with Travel
Cyberobotix
Dice Job Match Score™
🔢 Crunching numbers...
Job Details
Skills
- X.509
- SAP Cloud
- SAP HANA
- Security Architecture
- SaaS
- SAP BASIS
- SAP
- SAML
- Cisco ICM
- Cloud Foundry
- IPS
- IaaS
- Incident Management
- Microsoft IAS
- Enterprise Resource Planning
- Microsoft
- OAuth
- TLS
- OIDC
- Microsoft Exchange
Summary
Position Type : Senior SAP BTP Platform & Security Engineer
Position Type: Contract
Experience Level: 12+ Years (Minimum 3+ years dedicated SAP BTP)
Location: Remote with travel
Role Summary:
We are seeking a senior SAP BTP Platform & Security Engineer to spearhead the cloud infrastructure, connectivity, and enterprise security architecture required to deploy agentic AI (SAP Joule) and transactional integration with SAP S/4HANA. This role is responsible for establishing zero-trust identity architectures, configuring SAP Cloud Identity Services (IAS/IPS), standing up Cloud Connector environments, and establishing end-to-end Principal Propagation without relying on standard SaaS wrappers.
Core Responsibilities:
•Architect and provision SAP BTP subaccounts, multi-environment runtimes (Cloud Foundry, Kyma), and core services (SAP AI Core, Joule Studio, Destination Service).
•Configure SAP Cloud Identity Services (IAS/IPS) as the central trust broker between corporate identity providers (Microsoft Entra ID, Okta) and SAP backends, ensuring proper Global User ID management.
•Design, implement, and maintain Cloud Connector (SCC) configurations, including mutual TLS (mTLS), High Availability clusters, and System CA certificate automation.
•Configure BTP Destinations supporting Principal Propagation via X.509 Certificate injection and OAuth2SAMLBearerAssertion for both on-premise/PCE and public cloud endpoints.
•Partner with S/4HANA Basis and Security teams to validate end-to-end token exchange and authorization propagation (STRUST, CERTRULE, ICM parameters).
Required Technical Qualifications:
•BTP Core Services: Expert-level knowledge of BTP Cockpit, Entitlements management, Service Keys, Destination Service, and Connectivity Service.
•Identity & Security: Deep hands-on experience with SAML 2.0, OpenID Connect (OIDC), OAuth 2.0 flows, and SAP Cloud Identity Services (IAS/IPS).
•Enterprise Connectivity: Proven delivery of SAP Cloud Connector with System CA configuration for dynamic short-lived X.509 client certificate generation.
•ERP Security Alignment: Solid understanding of how S/4HANA consumes identity tokens, specifically CERTRULE, EXTID_DN, and ICM profile parameters (icm/HTTPS/verify_client).
- Dice Id: 91172251
- Position Id: 9137322
- Posted 5 hours ago
Company Info
About Cyberobotix
Cyberobotix emerges as a dynamic force in the IT consulting and staffing industry, poised to redefine excellence in talent acquisition and technology-driven solutions. With an in-depth understanding of diverse organizational needs, we specialize in delivering tailored solutions designed to match your unique requirements. Whether you need specialized short-term expertise, long-term strategic partners, or permanent team members, Cyberobotix is dedicated to exceeding your expectations.
At Cyberobotix, we understand that people and technology are at the heart of every success. Driven by our unwavering commitment to your growth, we place your needs at the forefront of everything we do. Our innovative approach combines cutting-edge technology with personalized service, ensuring that each placement or solution seamlessly aligns with your organization’s culture and objectives. Transparency is at our core, offering you full visibility to make well-informed decisions. From initial consultation to ongoing support, we monitor feedback and performance metrics to ensure your satisfaction.
