SAP SaaS Security/Admin

IBM; México; Presencial; MXN 300.000 - 460.000; Jornada completa

Descripción de la vacante

IBM in Mexico City is seeking an experienced SaaS access and security specialist to manage provisioning for Ariba and Concur, enforce least privilege, and maintain security controls across procurement and travel platforms.

The role requires hands-on experience with SAP SaaS security, IAM/SO, and strong incident-resolution skills, including documenting outcomes and improving automation to reduce recurring access requests.

Formación

• Experience with SAP SaaS security and administration.
• Proficient Ariba provisioning and role administration.
• Concur user permissions, delegates, and approver roles.
• Strong understanding of procurement/finance processes.
• IAS/IAG/SSO familiarity.
• Ticket handling with SLA discipline and RCA mindset.

Responsabilidades

• Manage Ariba and Concur provisioning, groups, roles, permission sets, delegates, approval roles, reporting permissions, admin permissions, and access troubleshooting.
• Resolve user access incidents, role-mapping defects, integration-driven user issues, SSO/provisioning handoff issues, and recurring access patterns across procurement, travel, and expense processes.
• Validate requests against least-privilege principles, approval models, security matrices, SoD/critical access expectations, and evidence requirements.
• Build KB articles and propose catalog updates, role templates, workflow improvements, or automation where repeated SaaS access requests occur.

Conocimientos

SAP SaaS security

Ariba administration

Concur administration

SSO/IAM awareness

Least-privilege enforcement

Ticketing & SLA discipline

Descripción del empleo

Experience in SAP SaaS security/administration; Ariba user/group/role administration; Concur user permissions, delegates, and approver roles; procurement/finance process awareness; IAS/IAG/SSO awareness; ticket execution, SLA discipline, documentation, and an RCA mindset.

Manage Ariba and Concur provisioning/deprovisioning, groups, roles, permission sets, delegates, approval roles, reporting permissions, admin permissions, and access troubleshooting.

Resolve user access incidents, role-mapping defects, integration-driven user issues, SSO/provisioning handoff issues, and recurring access patterns across procurement, travel, and expense processes.

Validate requests against least-privilege principles, approval models, security matrices, SoD/critical access expectations, and evidence requirements.

Build KB articles and propose catalog updates, role templates, workflow improvements, or automation where repeated SaaS access requests occur.