Required Qualifications
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related discipline, or equivalent professional experience.
8+ years of SAP security, authorization, or identity/access-management experience, including senior design or leadership responsibility.
Hands-on experience designing SAP S/4HANA authorization models; SAP S/4HANA Cloud Public Edition IAM experience strongly preferred.
Demonstrated experience with business-role design, least privilege, organizational restrictions, user lifecycle, access reviews, and segregation-of-duties controls.
Experience integrating SAP applications with enterprise identity providers and identity provisioning processes.
Strong production-support experience covering authorization troubleshooting, access governance, audit evidence, and high-severity access incidents.
Required Technical / Functional Skills
SAP S/4HANA Cloud Public Edition business users, business roles, business catalogs, IAM apps, restriction types, authorization groups, and IAM Information System.
SAP Cloud Identity Services: Identity Authentication and Identity Provisioning concepts, trust/authentication, provisioning jobs, source/target systems, mappings, and troubleshooting.
Role-based access control, least privilege, segregation of duties, sensitive/privileged access, access certification, and joiner-mover-leaver controls.
SAP Fiori authorization concepts and role-to-application access design.
SAP BTP roles/role collections and SAP Central Business Configuration access concepts sufficient to govern cross-platform access.
Identity federation/SSO concepts, SAML/OIDC awareness, SCIM/provisioning concepts, certificates/technical identities, and secure authentication patterns.
Audit controls, evidence management, access-risk remediation, incident/problem management, testing, and release impact assessment.
Preferred Qualifications
Experience in a regulated or audit-intensive professional-services, financial-services, accounting, or global enterprise environment.
Experience with SAP Cloud Identity Access Governance or another enterprise IGA/GRC platform for access requests, risk analysis, access certification, and privileged-access governance.
Experience integrating SAP Cloud Identity Services with Microsoft Entra ID or another corporate identity provider.
Experience governing security across SAP Ariba, SAP Fieldglass, SAP BTP, SAP Cloud ALM, and other connected cloud applications.
Knowledge of ITSOX controls, audit evidence requirements, ISO 27001/NIST-aligned security practices, and ITIL service-management processes..
