IAG SAP Security

Programmers.io; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Programmers.io is seeking a seasoned SAP security specialist to design, configure, and maintain SAP Identity Access Governance with integrations to SuccessFactors and IAM services. You will manage end-to-end provisioning between SAP IAS/IPS and cloud/on-prem apps such as S/4HANA, Ariba, and SuccessFactors.

You will lead operational support, optimize provisioning flows, and ensure least-privilege access across SAP cloud environments, including SoD rules and IAG risk analyses.

Qualifications

• Experience with SAP Identity Access Governance and related cloud/on-premises components.
• Familiarity with user lifecycle management and access reviews.
• Knowledge of S/4HANA security concepts and SAP Fiori.

Responsibilities

• Design, configure, and maintain SAP IAG integrating with SuccessFactors and IAM services.
• Manage end-to-end integration and provisioning between SAP IAS/IPS and target apps.
• Support bridge scenarios between SAP GRC AC and cloud IAG solutions.
• Lead daily operational support, troubleshoot provisioning failures and sync bottlenecks.
• Maintain roles (business/technical) across SAP cloud environments with least-privilege.
• Configure IAG risk analysis, SoD rules, and mitigating controls.
• Manage user lifecycle events in SAP IAS/IPS with mappings and transformations.

Skills

SAP Identity Access Governance

IAS/IPS

S4/HANA Security

GRC Access Control

PFCG

Fiori security

UAR

ITSM

SO D access controls

Authentication methods

Tools

SAP IAG tools

SAP IAS/IPS

SAP GRC AC

Job description

• Design, configure, and maintain SAP Identity Access Governance (IAG) integrating it with Success Factor / Identity Access Services for user hire-to-retire.
• Manage end-to-end integration and provisioning flows between SAP Cloud Identity Services (IAS/IPS) and target cloud/on-premise applications (e.g., SAP S/4HANA, SuccessFactors, Ariba).
• Support and optimize bridge scenarios between SAP GRC Access Control (AC) on-premise and SAP IAG cloud solutions using hybrid landscape architectures.
• Lead daily operational support, troubleshooting provisioning failures, system connection errors, job scheduling issues, and synchronization bottlenecks within IAG and IAS/IPS.
• Design, update, and maintain business roles and technical roles across various SAP cloud environments while ensuring strict alignment with least-privilege principles.
• Configure and maintain the IAG Risk Analysis engine, incorporating custom SoD rulesets and mitigating controls tailored to organizational risk appetites.
• Manage user lifecycle events (onboarding, offboarding, transfers) within SAP Cloud Identity Authentication (IAS) and Identity Provisioning (IPS), including custom attribute mappings and transformations.
• Perform standard SAP Security operations, including user administration, role maintenance (PFCG), and troubleshooting authorization issues in core SAP S4 systems. Will require deep understanding of Fiori catalogs and pages /spaces /groups.
• Participate in stakeholder meetings and provide SAP security solutions for S4 deployments across the globe.
• Collaborate with audit and compliance teams to facilitate periodic user access reviews (UAR) and SoD remediation activities utilizing IAG Access Certification.
• Investigate and resolve complex access issues and security incidents raised through IT service management (ITSM) tools within defined SLA timelines.
• Develop and maintain comprehensive technical documentation, including standard operating procedures (SOPs), system architecture diagrams, and configuration guides.
• Apply, test, and validate SAP notes, patches, and quarterly cloud upgrades related to SAP IAG, IAS, IPS, and GRC components to ensure operational continuity.
• Configure authentication methods in IAS, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and conditional authentication policies for diverse user groups.
• Optimize IPS source, target, and proxy system transformations using JSON to ensure precise data filtering and attribute synchronization across systems.
• Provide hypercare and regular knowledge transfer to junior security administrators and internal IT support teams regarding SAP cloud governance best practices.