SAP BTP Security Resource

Quantum Integrators; Raritan (NJ); On-site; USD 120,000 - 180,000; Full time

Job summary

Quantum Integrators seeks an experienced SAP BTP security expert to define identity, access, network, and data protection architecture for BTP subaccounts, extensions, and integrations. You will work closely with cloud architects, developers, and compliance teams to design secure governance and enforcement across platforms.

Responsibilities include configuring authentication, role-based access control, secure connectivity, and enabling CI/CD security integration.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• Hands-on experience with SAP BTP security (XSUAA, IAS/IPS, role collections, trust configuration).
• Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and PKI/certificates.

Responsibilities

• Define and implement secure identity and access management for SAP BTP subaccounts and integrations.
• Collaborate with cloud architects, developers, and compliance stakeholders.
• Configure security for Cloud Foundry, Kyma, and SAP Integration Suite.

Skills

SAP BTP security

XSUAA/IAS/IPS

OAuth 2.0 / OIDC / SAML

Cloud Connector / Kyma / Cloud Foundry

Certificates / PKI

CI/CD security integration

Threat modeling / SIEM awareness

Communication with stakeholders

Education

Bachelor’s degree in Computer Science or Security

Tools

Terraform

BTP CLI

Job description

Helps define the identity, access, network, and data protection architecture for BTP subaccounts, extensions, and integrations.

Work closely with cloud architects, developers, Basis/platform teams, and compliance stakeholders

Key Responsibilities:

Identity and access management

• Design and configure authentication and authorization using SAP Cloud Identity Services (IAS/IPS), including SSO and federation with corporate IdPs such as Azure AD/Entra ID and Okta.
• Define role collections, roles, and scopes, and manage authorizations via XSUAA and the Authorization & Trust Management service.
• Automate user and role provisioning and lifecycle management.
• Support SAP Cloud Identity Access Governance (IAG) for access reviews, SoD analysis, and privileged access.

Platform security and governance

• Define security standards for global accounts, directories, subaccounts, and spaces.
• Manage Cloud Foundry and Kyma security, including org/space roles, service keys, and secrets handling.
• Configure and manage Cloud Connector, destinations, and secure connectivity to on-premise and third-party systems.
• Apply secure network patterns such as private link, IP allow-listing, and mTLS.

Application and integration security

• Review and secure CAP, SAPUI5/Fiori, and Node.js/Java extensions (OAuth 2.0, JWT, CSRF, CORS, input validation).
• Secure SAP Integration Suite (API Management, Cloud Integration) with credential stores, certificates, and API policies.
• Partner with DevOps to embed security in CI/CD pipelines (SAST/DAST, dependency scanning, secrets management).

Data protection and compliance

• Implement encryption at rest and in transit, key management, and data masking where required.
• Support compliance with ISO 27001, SOC 1/2, GDPR, and internal policies, and provide evidence for audits.
• Review BTP audit logs and integrate them with SIEM tools (e.g., Splunk, Sentinel) via the Audit Log service.

Monitoring and incident response

• Define security monitoring, alerting, and incident response procedures for BTP.
• Run periodic security assessments and remediate findings.
• Track SAP Security Notes and BTP service updates and assess their impact.

Collaboration and documentation

• Produce security architecture documents, runbooks, and role design guides.
• Advise project teams on secure design and conduct security design reviews.
• Mentor developers and administrators on BTP security best practices.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• Hands‑on experience with SAP BTP security (XSUAA, IAS/IPS, role collections, trust configuration).
• Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and PKI/certificates.
• Experience with Cloud Connector, destinations, and hybrid connectivity.
• Working knowledge of Cloud Foundry and/or Kyma, and of SAP Integration Suite security.
• Familiarity with SAP S/4HANA and SAP security concepts (roles, authorizations, GRC/IAG).
• Understanding of cloud security principles (least privilege, zero trust, defense in depth).
• Good communication skills and the ability to work with technical and non-technical stakeholders.

Preferred Qualifications

• SAP certifications (e.g., SAP Certified Associate – Backend Developer for SAP BTP, or SAP Certified Technology Associate – SAP BTP).
• Security certifications such as CISSP, CISM, CCSP, or Azure/AWS security certifications.
• Experience with SAP Cloud ALM, SAP Build, SAP Event Mesh, or SAP HANA Cloud security.
• Scripting and automation skills (Terraform, BTP CLI, Python, or Bash) and infrastructure-as-code for BTP.
• Exposure to SIEM integration, threat modeling, and penetration testing coordination.
• Experience in regulated industries (finance, pharma, public sector).
• Analytical, with a risk-based approach to security decisions
• Strong ownership and attention to detail
• Ability to translate security requirements into practical technical controls
• Comfortable working in agile, multi-vendor environments

Thanks & Regards,

O: 609-632-0621 ext.130