Senior SAP IAM Security Architect – Hybrid Porto

iTRTech Group; Lisboa; Hybrid; EUR 31,000 - 35,000; Full time

Job summary

iTRTech Group is seeking an SAP IAM Security Specialist for a hybrid Porto role in Portugal. You will design and improve access governance for on-premises and cloud environments, translating business requirements into secure access solutions while supporting compliance and reducing security risks.

The Senior role requires 5+ years of experience, strong SAP authorization expertise (PFCG), and familiarity with RBAC/ABAC, IGA, and ITIL/ITSM processes.

Qualifications

• 5+ years of SAP IAM Security experience.
• Strong SAP authorization expertise with PFCG roles.
• Experience designing RBAC/ABAC models and translating requirements into technical solutions.
• IGA, provisioning and full access lifecycle knowledge.
• Joiner/Mover/Leaver processes, access reviews and remediation.

Responsibilities

• Advise stakeholders on authorization concepts and SoD.
• Translate access policies into technical roles and implement models.
• Contribute to IAM/security projects, including rollouts and improvements.
• Monitor compliance and support periodic access reviews and recertifications.
• Improve security architecture, processes, policies, guidelines and documentation.
• Assess audit findings and remediation tracking.

Skills

SAP IAM

Role engineering

SoD controls

RBAC/ABAC

IGA

Access lifecycle

ITIL/ITSM

GRC knowledge

Audit remediation

Tools

SAP GRC/Access Control

Job description

iTRTech Group is seeking an SAP IAM Security Specialist for a hybrid Porto role in Portugal. You will design and improve access governance for on-premises and cloud environments, translating business requirements into secure access solutions while supporting compliance and reducing security risks.

The Senior role requires 5+ years of experience, strong SAP authorization expertise (PFCG), and familiarity with RBAC/ABAC, IGA, and ITIL/ITSM processes.