SAP BTP Security Consultant

StackNexus; Maharashtra; On-site; INR 1,200,000 - 1,500,000; Full time

Job summary

A leading tech consultancy in India is seeking an experienced SAP BTP Security Consultant to design and implement security architecture for SAP BTP. You will establish trust between various identity providers, monitor vulnerabilities, and ensure compliance with SAP security guidelines. Ideal candidates should have a minimum of 5 years of SAP security experience, including at least 2 years specifically in SAP BTP security. This role requires a proactive approach and the ability to work independently within a global team.

Qualifications

• Minimum 5+ years of SAP security experience, with at least 2 years in SAP BTP.
• Hands-on experience establishing trust between IAS and Azure AD.
• Experience with IAS integration with SuccessFactors and Joule.

Responsibilities

• Design and implement security architecture for SAP BTP.
• Monitor and remediate vulnerabilities in SAP BTP environments.
• Ensure compliance with SAP security guidelines.

Skills

SAP security experience

Hands-on experience with IAS and Azure AD

Integration with SAP SuccessFactors

Conditional authentication rules implementation

User provisioning via IPS

Job description

Job Title: SAP BTP Security Consultant

Key Responsibilities

• Design and implement security architecture for SAP BTP, including Identity and Access Management (IAM), authentication, and authorization models.
• Configure and manage SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
• Establish trust between SAP IAS and Microsoft Azure AD or other Identity Providers (IdPs).
• Configure IAS integration with SAP SuccessFactors and Joule.
• Implement user provisioning via IPS to SAP on‑premise and Cloud applications (e.g., Ariba, SuccessFactors).
• Configure Role Collections for BTP services, including Group-to-Role Collection mapping and BTP platform role management.
• Design and maintain secure authentication mechanisms using OAuth, SAML, OIDC.
• Ensure compliance with SAP security guidelines and regulatory standards.
• Monitor and remediate vulnerabilities in SAP BTP environments.

Qualifications And Requirements

• Minimum 5+ years of SAP security experience, with at least 2 years in SAP BTP security.
• Hands‑on experience establishing trust between IAS and Azure AD or other IdPs.
• IAS integration with SuccessFactors and Joule.
• Implementing conditional authentication rules in IAS.
• Expertise in IAS trust configuration with multiple IdPs and SAP applications.
• User provisioning via IPS to SAP on‑premise and SAP Cloud apps (Ariba, SuccessFactors).
• Configuring Role Collections, Group-to-Role mapping and BTP platform role management.
• Designing and maintaining provisioning jobs for complex user lifecycle scenarios.
• Creating custom transformation rules in IPS for attribute mapping and filtering.
• Integrating IPS with non‑SAP systems using SCIM or REST APIs.
• Monitoring and troubleshooting provisioning logs and error handling in IPS.
• Implementing role‑based provisioning and dynamic group assignments.

Other Skills And Abilities

• Self‑driven, Proactive, Systems Thinking.
• Flexible and reliable—displaying great ownership in all aspects.
• Ability to work in a global distributed setting without supervision.