Aptino
Aptino

SAP Cloud ERP Security & Identity Access Management Lead

Remote • Posted 7 hours ago • Updated 7 hours ago
Contract W2
Contract Corp To Corp
Contract Independent
12 Months
No Travel Required
Remote
Depends on Experience
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Fieldglass
  • Cloud Computing
  • Collaboration
  • Computer Science
  • Auditing
  • Authentication
  • Authorization
  • Level Design
  • Integration Testing
  • Internal Auditing
  • Leadership
  • Identity Management
  • Information Systems
  • Lifecycle Management
  • HR Management
  • ISO/IEC 27001:2005
  • IT Service Management
  • Enterprise Resource Planning
  • Financial Services
  • Cyber Security
  • SAP GRC
  • SAP HANA
  • SAP Implementation
  • Risk Assessment
  • SAML
  • SAP
  • SAP Cloud
  • Regression Testing
  • Regulatory Compliance
  • Release Management
  • Production Support
  • Professional Services
  • Provisioning
  • Microsoft
  • OIDC
  • Onboarding
  • Procurement
  • Ariba
  • Documentation
  • Finance
  • ITGC
  • Management
  • Access Control
  • Accounting
  • Security QA
  • Service Management
  • SOD
  • SSO
  • Sarbanes-Oxley
  • Security Architecture
  • Application Lifecycle Management
  • SAP Fiori
  • SAP Security
  • Workflow
  • SAP S/4HANA Cloud Public Edition
  • SAP IAM
  • SAP Authorization
  • Business Role Design
  • Business Catalogs
  • IAM Apps
  • IAM Information System
  • Authorization Restrictions
  • Authorization Groups
  • Leading and Derived Roles
  • Role-Based Access Control (RBAC)
  • Least Privilege Access
  • Segregation of Duties (SoD)
  • User Access Management
  • Joiner-Mover-Leaver (JML)
  • User Lifecycle Management
  • SAP Cloud Identity Services
  • Identity Authentication (IAS)
  • Identity Provisioning (IPS)
  • Single Sign-On (SSO)
  • SCIM
  • Identity Federation
  • SAP Fiori Security
  • SAP BTP Roles and Role Collections
  • SAP Central Business Configuration (CBC)
  • Access Governance
  • Access Certification
  • Access Reviews
  • Access Risk Analysis
  • SAP Cloud Identity Access Governance (IAG)
  • Privileged Access Management (PAM)
  • Technical User Management
  • Emergency Access Management
  • Microsoft Entra ID
  • Authorization Troubleshooting
  • SAP Security Incident Management
  • IAM Integration
  • Identity Provisioning
  • Role Remediation
  • Security Regression Testing
  • Authorization Validation
  • SAP Cloud Release Management
  • Software Collections
  • Audit Readiness
  • SOX Compliance
  • Risk and Compliance
  • Access Matrices
  • Role-to-Job Mapping
  • Security Documentation
  • Change Management
  • ITIL
  • SAP Ariba
  • SAP Fieldglass
  • SAP Cloud ALM
  • SAP Support
  • IAM Automation
  • Security Governance
  • Cross-Functional Leadership
  • SAP S/4HANA Cloud Public Edition IAM Strategy
  • SAP Authorization Architecture
  • Security Operating Model
  • SAP Maintain Business Users
  • SAP Maintain Business Roles
  • SAP Business Role Templates
  • Business User Provisioning
  • Role Assignment Governance
  • Organizational Data Restrictions
  • Read/Write Authorization Controls
  • Identity Source Integration
  • HR-Driven Identity Lifecycle
  • Identity Synchronization
  • Provisioning Job Monitoring
  • Identity Mapping
  • Source and Target Systems
  • Authentication Troubleshooting
  • Trust Configuration
  • Certificates and Technical Identities
  • Fiori Application Authorization
  • SAP BTP Access Governance
  • SAP Communication Arrangements
  • SAP Integration Security
  • SAP Cloud Configuration
  • Authorization Expansion Prevention
  • Role Overlap Analysis
  • Excessive Access Reduction
  • Orphan Account Management
  • Sensitive Access Controls
  • Periodic User Access Reviews
  • Access Recertification Campaigns
  • Access Request Workflows
  • Privileged and Administrative Access
  • Emergency Access Governance
  • Production Access Escalation
  • Authorization Failure Analysis
  • SAP IAM Release Impact Assessment
  • SAP Cloud Release Regression
  • IAM Object Changes
  • Business Catalog Changes
  • Restriction Type Changes
  • Role Transport and Deployment
  • Configuration Lifecycle Management
  • Software Collection Management
  • Security Acceptance Criteria
  • Security Design Reviews
  • Role Simplification
  • Access Anomaly Monitoring
  • Failed Provisioning Monitoring
  • Inactive and Locked User Monitoring
  • Access Request SLA Management
  • Audit Evidence Preparation
  • Internal and External Audit Support
  • SAP Support Incident Management
  • High-Severity Access Incident Resolution
  • Financial Close Access Support
  • Procurement Access Governance
  • Release Hypercare
  • Role Design Standards
  • Naming Conventions
  • Security Decision Records
  • Standard Operating Procedures (SOPs)
  • Identity Governance and Administration (IGA)
  • Microsoft Entra ID Integration
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • System Landscape Governance
  • ITGC Controls
  • ISO 27001
  • NIST Security Controls
  • Agile
  • Scrum
  • QA Governance
  • Security Analyst Oversight
  • Cross-Platform Access Governance
  • Enterprise Cybersecurity
  • Corporate IAM
  • HR/HCM Integration
  • SAP Functional Security
  • Enterprise Architecture
  • Security Operations

Summary

Role: SAP Cloud ERP Security & IAM Lead

Location: Remote – US (Travel as needed)
Duration: 12+ Months

Role Overview:

We are seeking an experienced SAP Cloud ERP Security & Identity Access Management (IAM) Lead to own security architecture, authorization design, identity integration, and access governance for SAP S/4HANA Cloud Public Edition. The role will oversee business-role management, user lifecycle processes, access-risk controls, production security support, and compliance in a post-go-live environment.

Key Responsibilities:

  • Lead SAP S/4HANA Cloud Public Edition security strategy, authorization architecture, role design standards, and ongoing access governance.

  • Design and maintain business roles, business catalogs, IAM apps, authorization groups, restriction types, and leading/derived role structures while enforcing least-privilege access.

  • Govern the complete business-user lifecycle, including onboarding, role assignment, organizational changes, temporary access, account locking, and timely deprovisioning.

  • Manage security integration with SAP Cloud Identity Services, including Identity Authentication, Identity Provisioning, SSO, identity federation, and provisioning workflows.

  • Establish segregation-of-duties (SoD), sensitive-access, privileged-access, and emergency-access controls in collaboration with Risk, Compliance, Internal Audit, and business owners.

  • Lead access-risk assessments, role remediation, periodic access certifications, access reviews, and audit-evidence preparation using available GRC/IGA tools.

  • Govern SAP Fiori authorizations and coordinate access requirements for SAP BTP, Central Business Configuration, SAP Cloud ALM, Ariba, Fieldglass, and connected applications.

  • Troubleshoot production authorization, authentication, and provisioning issues; manage escalations and resolve recurring access problems.

  • Define security requirements for new functionality, integrations, extensions, organizational changes, and SAP cloud releases.

  • Lead authorization regression testing, security impact assessments, controlled role deployments, and release-readiness reviews.

  • Maintain role catalogs, access matrices, role-to-job mappings, security procedures, and audit documentation.

  • Improve access automation, monitoring, role simplification, and operational performance while providing technical guidance to security analysts and implementation partners.

Required Qualifications:

  • Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or equivalent professional experience.

  • 8+ years of SAP security, authorization, or IAM experience, including senior-level design or leadership responsibilities.

  • Hands-on SAP S/4HANA authorization design experience; SAP S/4HANA Cloud Public Edition IAM experience strongly preferred.

  • Strong understanding of business-role architecture, authorization restrictions, least privilege, user lifecycle management, SoD, and access-risk remediation.

  • Experience integrating SAP applications with enterprise identity providers and provisioning platforms.

  • Expertise in SAP Cloud Identity Services, Identity Authentication, Identity Provisioning, SAP Fiori authorization, and role-based access control.

  • Working knowledge of SAML, OIDC, SCIM, SSO, identity federation, certificates, technical identities, and secure authentication.

  • Experience with production support, access incident troubleshooting, security testing, release management, and audit readiness.

Preferred Qualifications:

  • Experience with SAP Cloud Identity Access Governance or enterprise GRC/IGA platforms.

  • Familiarity with Microsoft Entra ID and integrations across SAP BTP, Ariba, Fieldglass, and other SAP cloud applications.

  • Experience in financial services, professional services, accounting, or other regulated enterprise environments.

  • Knowledge of SOX/ITcontrols, ISO 27001, NIST, and ITIL service-management practices.

Cross-Functional Collaboration:

Work closely with Corporate IAM, Cybersecurity, HR/HCM, Finance, Procurement, Risk, Compliance, Internal Audit, SAP functional and technical teams, BTP architects, Integration, QA/Release Management, Service Management, and SAP implementation partners.

Success Measures:

Maintain least-privilege access, reliable identity provisioning, effective SoD controls, timely access reviews, audit readiness, stable production support, and secure SAP cloud releases.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 90999382
  • Position Id: 9120310
  • Posted 7 hours ago
Contact the job poster
AK

Anchal Khapekar

Recruiter @ Aptino

View Profile
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.
Remote jobs at Aptino