SAP IAM Architect

Tata Consultancy Services; United Kingdom; On-site; GBP 45,000 - 75,000; Full time

Benefits offered by this job

Pension

Health care

Life assurance

Laptop

Phone

Training resources

Discounts within Tata network

Health and wellness initiatives

London Marathon sponsorship

Job summary

TCS in the United Kingdom is seeking a permanent SAP IAM Architect to design, implement and govern SAP IAM across SAP S/4HANA, ECC and cloud applications. You will lead SoD risk analysis, define risk rulesets, and craft robust role hierarchies and access controls.

Ideal candidates will have hands-on experience with ARA/ARM/EAM/RDP, SAP IAS/IPS, and integration with third-party IAM tools like SailPoint, plus Agile/Scrum experience.

Qualifications

• We require hands-on SAP IAM with ARA, ARM, EAM and RDP.
• Deep understanding of SAP authorization concepts and RBAC.
• Experience across SAP S/4HANA, ECC security and SoD risk management.
• Identity and access management concepts and lifecycle management.
• Familiarity with SAP IAS/IPS and cloud integration.

Responsibilities

• Configure SAP IAM modules across SAP S/4HANA, ECC and cloud apps.
• Perform SoD risk analysis and mitigate access risks.
• Define and maintain risk rulesets and access controls.
• Design and maintain business/technical roles and authorizations.
• Manage user provisioning, approvals and workflows.
• Integrate SAP IAM with SAP IAS, IPS and GRC systems in hybrid landscapes.
• Configure cloud connectors and identity federation.
• Carry out testing and UAT support.

Skills

SAP IAM

RBAC

SoD risk analysis

Agile/Scrum

Stakeholder communication

Problem solving

Education

CISA/CISSP certifications

SAP GRC certification

Tools

ABAP

SAP Fiori/UI5

APIs

SailPoint

Job description

Salary: £45,000 - 75,000 per year

Requirements:

• We require strong hands-on experience with SAP IAM modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Role Design Provisioning (RDP).
• We require a deep understanding of SAP authorization concepts, including roles, profiles, objects, user administration, and access control.
• We require experience with SAP S/4HANA and ECC security.
• We require Segregation of Duties (SoD) risk management experience, including rule set configuration and maintenance, risk identification and mitigation strategies, and compliance frameworks such as SOX and audit controls.
• We require identity and access management concepts, including user lifecycle management and role-based access control (RBAC).
• We require hands-on experience with SAP IAS (Identity Authentication Service) and SAP IPS (Identity Provisioning Service).
• We require experience integrating SAP IAM with SAP applications and cloud systems.
• We require experience configuring access request workflows, including multi-stage approval workflows, risk-based access request processes, and access provisioning workflows.
• We require strong problem-solving and analytical skills.
• We require effective communication with business and technology stakeholders.
• We require Agile/Scrum experience.
• Desirable: experience with advanced SAP landscapes, including hybrid landscapes and multi-system environments.
• Desirable: basic knowledge of technical development, such as ABAP, SAP Fiori/UI5, APIs, and automation.
• Desirable: experience integrating IAM with third-party IAM tools such as SailPoint and with cloud applications.
• Desirable: knowledge of compliance and governance frameworks, including SOX, GDPR, and ISO27001, and experience in audit handling.
• Desirable: SAP Security, SAP IAM, or SAP GRC certifications, or related certifications such as CISA or CISSP.

Responsibilities:

• We implement and configure SAP IAM modules, including ARA, ARM, EAM, and RDP.
• We support deployment across SAP S/4HANA, ECC, and cloud applications.
• We perform Segregation of Duties (SoD) risk analysis.
• We identify and mitigate critical access risks and compliance violations.
• We define and maintain risk rulesets and mitigation controls.
• We design and maintain business roles, technical roles, role hierarchies, and authorizations.
• We manage user provisioning and de-provisioning, access requests, and approval workflows.
• We integrate SAP IAM with SAP IAS, SAP IPS, SAP GRC systems in hybrid landscapes, and non-SAP systems via connectors and APIs.
• We configure cloud connectors and identity federation.
• We configure access request workflows, including multi-level approval processes and risk-based approvals.
• We customize business rules and notification mechanisms.
• We perform unit testing, integration testing, and UAT support.
• We manage transport of configurations and production deployments.
• We maintain functional and technical documentation and access governance policies.
• We define standards for role naming conventions and access control practices.

Technologies:

• ABAP
• ARM
• Architect
• Cloud
• EAM
• IAM
• Support
• Network
• RBAC
• SAP S/4HANA
• SAP
• SAP Fiori
• Security

More:

We are TCS, a purpose-led transformation company built on belief, supporting some of the biggest brands in the UK and worldwide as they transform through technology and make a meaningful difference to the people and communities they serve. This is a permanent SAP IAM Architect role in the United Kingdom, working 40 hours per week full time. We offer competitive salary packages and benefits including pension, health care, life assurance, laptop, phone, access to extensive training resources, and discounts within the wider Tata network. We also offer health and wellness initiatives, sports events, and we are a proud sponsor of the London Marathon. We are committed to diversity, inclusion, and wellbeing, and we welcome applications from people of all backgrounds, including disabled people and those with long-term conditions who meet the minimum criteria.

last updated 36 week of 2026