SAP BTP Identity & Access Consultant

Role overview

Own identity and access design for a vendor portal built on SAP Business Technology Platform (BTP). The work covers secure onboarding and sign-in for external business users, fine-grained access to their own portal data, and trusted connections to SAP S/4HANA and related applications. You’ll coordinate with integration, BASIS, and client security teams and support delivery through launch and ongoing operations.

Responsibilities - Configure SAP Cloud Identity Services for onboarding, self-registration, passwords, and multi-factor authentication. - Set up identity trust between BTP, SAP Identity Authentication Service, and corporate identity providers using SAML 2.0 and OpenID Connect. - Design roles, groups, and authorization rules so external users can access only the business information assigned to them. - Secure access to SAP Build Work Zone and CAP applications, and enable connectivity to S/4HANA through SAP Cloud Connector, including principal propagation. - Automate account and role provisioning; support access requests, approvals, periodic reviews, and segregation-of-duties checks. - Investigate sign-in issues, review audit logs, document the security design, conduct role-based and negative testing, and assist with go-live and hypercare.

Requirements - Degree in computer science, information systems, cybersecurity, or a related discipline, or equivalent experience. - At least five years in SAP security or identity and access management, including hands-on SAP BTP IAS configuration. - Strong knowledge of SAML 2.0, OpenID Connect, OAuth 2.0, and MFA. - Experience with BTP subaccount security, role collections, and trust setup. - Experience securing S/4HANA connectivity through SAP Cloud Connector, including principal propagation, and supporting external partner or supplier users. - Eligibility to obtain and maintain an active government clearance; U.S. citizenship is required.

Nice to have - Experience with SAP Cloud Identity Access Governance or Microsoft Entra ID Governance, enterprise identity-provider integration, SAP Build Work Zone or CAP security, or S/4HANA authorization design. - Familiarity with NIST SP 800-53, FedRAMP, or federal and defense programs; SAP BTP security certification.

Benefits and work setup - Advertised annual salary range: $120,000–$150,000, with the offer based on qualifications, skills, experience, and location. - Benefits include medical, dental, vision, life, and long-term disability coverage, a 401(k), bonus opportunities, paid holidays, and paid time off.