SAP Cloud Security & IAM Architect

Socket.dev; Dearborn (MI); Hybrid; USD 65,000 - 166,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Flexible time off

Vehicle discount program

Tuition assistance

Job summary

Ford Motor Company is seeking an SAP Security Specialist to design and operate robust security controls across SAP environments hosted in public clouds. You will implement IAM, SSO, MFA, SoD policies, and perform regular vulnerability and compliance checks while collaborating with SAP and cloud teams.

The role requires 3–5 years in SAP Security, hands-on GRC/IAG experience, and a strong understanding of SAP security architectures and role design.

Qualifications

• 3–5 years of SAP Security experience including hands-on SAP GRC or IAG.
• Experience securing SAP workloads in public cloud and IAM policies.
• Knowledge of SAP security architectures, roles, and SoD analysis.

Responsibilities

• Design, implement, and maintain SAP security architectures and access controls.
• Configure SoD policies and integrate SAP cloud identity services.
• Secure SAP landscapes hosted on public cloud platforms (S/4HANA, BTP, RISE).
• Manage user provisioning, SSO, MFA, and federated identity flows.
• Conduct vulnerability assessments and compliance reviews (SOC 2, ISO 27001).
• Define, build, and audit SAP business roles and emergency access (Firefighter).
• Investigate security incidents and support remediation with SMEs.
• Collaborate with SAP functional teams, GRC analysts, and cloud teams.

Skills

SAP Security

IAG (Identity Access Governance)

Cloud security

IAM

SoD analysis

Education

Bachelor or Master in CS/IT/Cybersecurity

Tools

SAP GRC

SAP IAS/IPS

Job description

Ford Motor Company is seeking an SAP Security Specialist to design and operate robust security controls across SAP environments hosted in public clouds. You will implement IAM, SSO, MFA, SoD policies, and perform regular vulnerability and compliance checks while collaborating with SAP and cloud teams.

The role requires 3–5 years in SAP Security, hands-on GRC/IAG experience, and a strong understanding of SAP security architectures and role design.