SAP Cyber Security Specialist / Infrastructure Engineer

M&T Resources; Canberra; On-site; AUD 120,000 - 160,000; Full time

Job summary

A technology consulting firm in Canberra is looking for an experienced SAP Cyber Security Specialist / Infrastructure Engineer. You will manage identity provisioning, implement secure authentication in hybrid environments, and ensure compliance with Australian Government security standards. Ideal candidates will possess extensive SAP cybersecurity experience and expertise in configuring secure systems to protect mission-critical SAP platforms. The role requires collaborative skills for cross-functional team support, ensuring compliance with internal and government standards.

Qualifications

• 10+ years of experience in SAP cybersecurity-focused roles.
• Proficiency in identity provisioning and management.
• Strong understanding of SAP security components in ECC and S/4HANA environments.

Responsibilities

• Manage identity provisioning and de-provisioning across SAP landscapes.
• Implement authentication protocols in hybrid environments.
• Ensure ongoing security compliance and support for major incidents.

Skills

SAP cybersecurity expertise

Information Security

SAML 2.0, OIDC, OAuth 2.0

SAP Cloud solutions

Identity Management systems

Microsoft Identity Manager

Australian Government security standards

SIEM tools

Education

Tertiary education in Information Security, Computer Science, or related field

Tools

SAP

Azure AD

SAP Access Control

SAP Cloud Platform (BTP)

Job description

SAP Cyber Security Specialist / Infrastructure Engineer

Join to apply for the SAP Cyber Security Specialist / Infrastructure Engineer role at M&T Resources.

Location: Canberra, ACT Contract: 12 months (with up to 2 x 12‑month extensions) Security Clearance: Baseline OR Higher Hours: Up to 40 hours per week Working Arrangements: Onsite (flexible arrangements may be considered).

About the Role

Our Federal Government client is seeking a SAP Cyber Security Specialist / Infrastructure Engineer. This environment operates across multiple Departmental networks, which creates additional complexity in maintaining and implementing technology solutions. You will have deep expertise in Cloud Identity Services, identity provisioning, authentication frameworks, SAP IDM, and SAP Access Control. You will be responsible for protecting mission‑critical SAP systems, managing identity integrations, and ensuring compliance through proactive monitoring and root cause analysis. This role requires a proven ability to configure secure authentication paths, integrate with external Identity and Access Management platforms such as Microsoft Identity Manager, and manage SAP security components in ECC and S/4HANA environments.

Key Responsibilities

• Administration and troubleshooting of Identity Management systems including SAP, Azure AD, Microsoft Identity Manager, and other systems.
• Management of secure identity provisioning and de‑provisioning across SAP landscapes.
• Implementation of authentication protocols (SAML 2.0, OIDC, OAuth 2.0) and secure authentication in hybrid environments.
• Implementation of SAP Access Control components.
• Designing and enforcing risk‑based authentication policies and configuration of policy‑based authorizations for SAP applications.
• Integration of multi‑factor authentication platforms with SAP.
• Monitoring and mitigation of threats across multiple surfaces, including RFC connections and dormant or orphaned accounts.
• Configuration and maintenance of SAP UI masking and UI logging for sensitive data protection, including log extraction and analysis.
• Leading identification and response to potential security events, including root cause analysis for incidents and documentation of remediation steps.
• Ensuring ongoing system security compliance with Whole‑of‑Government and internal standards, including supporting Authority to Operate processes, penetration testing, and IRAP assessments of SDO systems.
• Operational support for major incidents.
• Collaboration with cross‑functional teams for technology initiatives, system integrations, disaster recovery planning, and end‑user support.
• Knowledge sharing, team mentoring, and uplift of technical capability (including documentation of processes, design etc.), and fostering a collaborative and high‑performing culture.

Skills & Experience

• Tertiary education in Information Security, Computer Science, or a related field.
• Subject matter expertise (equivalent to 10+ years of experience) in SAP cybersecurity‑focused roles.
• Expertise in SAP Cloud solutions, including SAP BTP and Cloud Identity Services.
• Proven experience with and/or strong understanding of:
  • SAML 2.0, OIDC, OAuth 2.0, SCIM.
  • SAP IDM.
  • SAP Enterprise Threat Detection.
  • SAP Access Control, including HR trigger and UAR customizations.
  • SU25, role migration from ECC to S/4HANA.
  • SAP UI Logging, UI Masking.
  • BTP and SAP Cloud systems Security.
  • SIEM tools and incident response procedures.
  • Managing security in hybrid SAP environments.
\
• Australian Government compliance and security standards (ISM, PSPF, IRAP, ANAO etc.).
• Previous experience with the technical delivery aspects of ERP implementations, including system configuration, integration, and data migration will be highly regarded.

Apply now to be part of a high‑performing team delivering critical SAP security services for the Australian Government.

Contact Jess: [e-mail]