SAP BTP Identity & Access Consultant

c5miinsightllc; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Long-term Disability

401(k)

Bonus Opportunities

Holidays

Paid Time Off

Job summary

c5miinsightllc is seeking an experienced SAP security architect to own identity and access design for a vendor portal on SAP BTP. You will secure onboarding and sign-in for external users and enable trusted connections to SAP S/4HANA, coordinating with integration, BASIS, and client security teams through launch and ongoing operations.

Responsibilities include configuring SAP Cloud Identity Services, establishing SAML/OIDC trust, designing role-based access, and automating provisioning while

Qualifications

• Degree in computer science, information systems, cybersecurity, or related discipline.
• At least five years in SAP security or identity and access management, including hands-on SAP BTP IAS configuration.
• Strong knowledge of SAML 2.0, OpenID Connect, OAuth 2.0, and MFA.
• Experience with BTP subaccount security, role collections, and trust setup.
• Eligibility to obtain and maintain an active government clearance; U.S. citizenship is required.

Responsibilities

• Configure SAP Cloud Identity Services for onboarding, self-registration, passwords, and MFA.
• Set up identity trust between BTP, SAP Identity Authentication Service, and corporate identity providers using SAML 2.0 and OpenID Connect.
• Design roles, groups, and authorization rules so external users access only assigned data.
• Secure access to SAP Build Work Zone and CAP apps; enable connectivity to S/4HANA via SAP Cloud Connector.
• Automate account and role provisioning; support access requests, approvals, reviews, and segregation-of-duties checks.
• Investigate sign-in issues, review audit logs, document security design, perform RBAC and negative testing, assist Go-Live and hypercare.

Skills

SAP Security

Identity & Access Management

SAML 2.0

OpenID Connect

OAuth 2.0

MFA

BTP IAS configuration

Education

Degree in CS / Information Systems / Cybersecurity

Tools

SAP Cloud Connector

SAP BTP IAS

Job description

Role overview

Own identity and access design for a vendor portal built on SAP Business Technology Platform (BTP). The work covers secure onboarding and sign-in for external business users, fine-grained access to their own portal data, and trusted connections to SAP S/4HANA and related applications. You’ll coordinate with integration, BASIS, and client security teams and support delivery through launch and ongoing operations.

Responsibilities

• Configure SAP Cloud Identity Services for onboarding, self-registration, passwords, and multi-factor authentication.
• Set up identity trust between BTP, SAP Identity Authentication Service, and corporate identity providers using SAML 2.0 and OpenID Connect.
• Design roles, groups, and authorization rules so external users can access only the business information assigned to them.
• Secure access to SAP Build Work Zone and CAP applications, and enable connectivity to S/4HANA through SAP Cloud Connector, including principal propagation.
• Automate account and role provisioning; support access requests, approvals, periodic reviews, and segregation-of-duties checks.
• Investigate sign-in issues, review audit logs, document the security design, conduct role-based and negative testing, and assist with go-live and hypercare.

Requirements

• Degree in computer science, information systems, cybersecurity, or a related discipline, or equivalent experience.
• At least five years in SAP security or identity and access management, including hands-on SAP BTP IAS configuration.
• Strong knowledge of SAML 2.0, OpenID Connect, OAuth 2.0, and MFA.
• Experience with BTP subaccount security, role collections, and trust setup.
• Experience securing S/4HANA connectivity through SAP Cloud Connector, including principal propagation, and supporting external partner or supplier users.
• Eligibility to obtain and maintain an active government clearance; U.S. citizenship is required.

Nice to have

• Experience with SAP Cloud Identity Access Governance or Microsoft Entra ID Governance, enterprise identity-provider integration, SAP Build Work Zone or CAP security, or S/4HANA authorization design.
• Familiarity with NIST SP 800-53, FedRAMP, or federal and defense programs; SAP BTP security certification.

Benefits and work setup

Advertised annual salary range: $120,000–$150,000, with the offer based on qualifications, skills, experience, and location.

• Benefits include medical, dental, vision, life, and long-term disability coverage, a 401(k), bonus opportunities, paid holidays, and paid time off.