IAG SAP Security

Vish Consulting IT; Painted Post (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Vish Consulting IT is seeking an experienced SAP Security professional to design, configure, and maintain SAP Identity Access Governance (IAG) with cloud integrations for SuccessFactors and Identity Access Services. You will manage end-to-end provisioning between IAS/IPS and SAP S/4HANA, Ariba, and other applications, ensuring least-privilege access and strong SoD controls.

The role involves leading day-to-day operations, troubleshooting provisioning and synchronization issues, and collaborating

Qualifications

• Experience implementing SAP IAG and cloud identity services.
• Strong knowledge of SAP S/4HANA security and GRC.
• Hands-on with IAS/IPS, SSO/MFA configurations.

Responsibilities

• Design, configure, and maintain SAP IAG integrating with Success Factors and Identity Access Services.
• Manage end-to-end integration between IAS/IPS and SAP/S4HANA and other apps.
• Lead provisioning/workflow troubleshooting and lifecycle events.

Skills

SAP IAG

GRC Access Control

Fiori security

S4/HANA security

IAM governance

Tools

PFCG

IAS/IPS

Job description

Job Title: IAG SAP Security

Location: Painted Post, NY (Remote)
full- time (Permanent role)/Contract Role

Job Description:

• Design, configure, and maintain SAP Identity Access Governance (IAG) integrating it with Success Factor / Identity Access Services for user hire-to-retire.
• Manage end-to-end integration and provisioning flows between SAP Cloud Identity Services (IAS/IPS) and target cloud/on-premise applications (e.g., SAP S/4HANA, SuccessFactors, Ariba).
• Support and optimize bridge scenarios between SAP GRC Access Control (AC) on-premise and SAP IAG cloud solutions using hybrid landscape architectures.
• Lead daily operational support, troubleshooting provisioning failures, system connection errors, job scheduling issues, and synchronization bottlenecks within IAG and IAS/IPS.
• Design, update, and maintain business roles and technical roles across various SAP cloud environments while ensuring strict alignment with least-privilege principles.
• Configure and maintain the IAG Risk Analysis engine, incorporating custom SoD rulesets and mitigating controls tailored to organizational risk appetites.
• Manage user lifecycle events (onboarding, offboarding, transfers) within SAP Cloud Identity Authentication (IAS) and Identity Provisioning (IPS), including custom attribute mappings and transformations.
• Perform standard SAP Security operations, including user administration, role maintenance (PFCG), and troubleshooting authorization issues in core SAP S4 systems. Will require deep understanding of Fiori catalogs and pages /spaces /groups.
• Participate in stakeholder meetings and provide SAP security solutions for S4 deployments across the globe.
• Collaborate with audit and compliance teams to facilitate periodic user access reviews (UAR) and SoD remediation activities utilizing IAG Access Certification.
• Investigate and resolve complex access issues and security incidents raised through IT service management (ITSM) tools within defined SLA timelines.
• Develop and maintain comprehensive technical documentation, including standard operating procedures (SOPs), system architecture diagrams, and configuration guides.
• Apply, test, and validate SAP notes, patches, and quarterly cloud upgrades related to SAP IAG, IAS, IPS, and GRC components to ensure operational continuity.
• Configure authentication methods in IAS, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and conditional authentication policies for diverse user groups.
• Optimize IPS source, target, and proxy system transformations using JSON to ensure precise data filtering and attribute synchronization across systems.
• Provide hypercare and regular knowledge transfer to junior security administrators and internal IT support teams regarding SAP cloud governance best practices.