Principal Product Manager - Identity, Authentication & Government Cloud Security

SAP; Palo Alto (CA); Hybrid; USD 198,000 - 420,000; Full time

Job summary

SAP in Palo Alto is seeking a Principal Product Manager to own the government-grade authentication and platform security requirements for SAP Business Network. You will drive BYOIdP, SSO federation, and the Authorization Management Service across NS2 and SAP Sovereign Cloud deployments.

In this role you will translate FedRAMP and ATO needs into actionable engineering specs, collaborate with security, compliance, and partner identity providers, and articulate the roadmap to executives and

Qualifications

• 10+ years in product management for platform security, identity, or access management.
• Deep knowledge of identity protocols (SAML, OIDC, OAuth 2.0) and enterprise SSO architectures.
• Experience with FedRAMP certification requirements and ATO processes.

Responsibilities

• Lead production requirement definition for the SBN Authentication Framework targeting NS2 and SAP Sovereign Cloud.
• Define and own product requirements for US Government BYOIdP support and third-party identity provider integrations.
• Drive the Authorization Management Service roadmap to meet government access control mandates.
• Serve as SME on FedRAMP certification processes and translate compliance obligations into actionable engineering requirements.
• Partner with SAP BTP, IAS, and cloud security teams to define and validate SSO and federation architectures.
• Engage government customers and agencies to validate requirements and gather feedback.
• Communicate product vision, security rationale, and roadmap status to cross-functional teams.
• Ensure alignment between platform security capabilities and broader NS2/Sovereign Cloud strategy.

Skills

Platform security

Identity and access management

SAML

OIDC

OAuth 2.0

FedRAMP experience

Communication skills

Cross-functional collaboration

Leadership

BYOIdP integration

Tools

SAP BTP Security Model

SAP Identity Authentication Services (IAS)

Job description

We help the world run better

At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

This is a hybrid role based out of Palo Alto, CA. Hybrid is 3 days a week onsite, 2 days a week remote.

The Principal Product Manager will lead production requirement definition for the SAP Business Network authentication and platform security framework on NS2 and SAP Sovereign Cloud deployments. This role sits at the intersection of US Government identity requirements, cloud platform security, and SAP product strategy, and is critical to enabling government customers to operate SAP Business Network in FedRAMP-authorized, sovereign environments.

The successful candidate will drive the end-to-end product requirement lifecycle for government-grade authentication features, including Bring Your Own IdP (BYOIdP) support, Single Sign-On federation, and the Authorization Management Service. You will serve as the internal subject matter expert on FedRAMP certification requirements, translating compliance mandates into well-scoped, deliverable product requirements. This role will collaborate closely with engineering, security, and compliance teams as well as third-party identity providers.

The candidate must be capable of translating complex security and compliance requirements into actionable product specifications and communicating those to both technical and executive stakeholders. They will review government customer use cases and requirements, represent the product roadmap to partners and agencies, and ensure that SBN's security posture meets the evolving demands of FedRAMP High and SAP Sovereign Cloud environments.

Responsibilities

• Lead production requirement definition for the SBN Authentication Framework targeting NS2 and SAP Sovereign Cloud
• Define and own product requirements for US Government BYOIdP support, including third-party identity provider integrations
• Drive the Authorization Management Service roadmap to meet government access control mandates
• Serve as internal SME on FedRAMP certification processes and translate compliance obligations into actionable engineering requirements
• Partner with SAP BTP, SAP Identity Authentication Services (IAS), and cloud security teams to define and validate SSO and federation architectures
• Engage government customers and agency stakeholders to validate requirements, prioritize features, and gather feedback
• Communicate product vision, security rationale, and roadmap status to cross-functional teams and leadership
• Ensure alignment between platform security capabilities and the broader NS2 and Sovereign Cloud product strategy

Work Experience

• 10+ years of product management experience, with a focus on platform security, identity, or access management
• Deep knowledge of identity protocols (SAML, OIDC, OAuth 2.0) and enterprise SSO architectures
• Hands-on familiarity with SAP BTP Security Model and SAP Identity Authentication Services (IAS)
• Demonstrated experience with FedRAMP certification requirements and the Authorization to Operate (ATO) process
• Strong written and verbal communication skills; ability to explain security concepts to non-technical stakeholders
• A goal-focused team player comfortable operating in a fast-paced, cross-functional, and compliance-driven environment

About SAP Business Network

SAP Business Network is the world’s largest B2B commerce and collaboration platform, connecting millions of trading partners across procurement, logistics, asset management, and supply chain. We are building the Network of Intelligent Enterprises, a unified, AI-powered platform that transforms how companies collaborate with suppliers, logistics providers, contract manufacturers, and partners.

Bring out your best

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion

SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities.

If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: [e-mail].

For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency

SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP’s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted annual combined range for this position is 198200-420000USD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.

Employment Type: Regular Full Time