SAP Joule AI Security Architect

VLink Inc; Houston (TX); On-site; USD 156,000 - 177,000; Full time

Job summary

VLink Inc. in Houston, TX is seeking an experienced SAP Joule AI Security Architect for a 12-month contract.

You will own the security posture of Joule deployments, focusing on authentication, authorization, data governance, and risk management with business and IT counterparts. Responsibilities include designing RBAC and SoD controls, assessing data sensitivity, preventing data leakage in AI prompts and integrations, aligning with GRC requirements, and maintaining SAP AI security policies and

Qualifications

• Hands-on security architecture experience in SAP or cloud environments.
• Experience with SAP GRC and access control frameworks.
• 5+ years in SAP Security and GRC, including SAP S/4HANA Security and SAP GRC Access Control.
• Knowledge of AI security risks, data leakage, and prompt-based access in enterprise AI deployments.
• Familiarity with SAP BTP Security and Integration Suite security.
• Security certifications: CISSP, CISM, or other cloud security certs.

Responsibilities

• Define and implement security architecture for Joule deployments, including authentication, authorization, and RBAC.
• Design role-based access controls and least-privilege access strategies.
• Assess data sensitivity and enforce data governance controls for Joule use cases.
• Review AI use cases for data leakage, privacy, and prompt exposure risks.
• Partner with GRC to map Joule access against governance requirements.
• Define and maintain SAP AI security policies and governance frameworks.
• Perform security reviews and risk assessments for POC and production deployments.
• Establish secure development lifecycle requirements for AI agents.
• Design monitoring, logging, and audit trails for Joule usage.
• Validate secure configurations of AI services, APIs, and connectors.
• Support vulnerability management and remediation for SAP AI solutions.
• Drive security and observability standards across POC and production environments.
• Educate SAP teams on AI security risks and governance requirements.

Skills

SAP Security

GRC

Data Governance

AI Security

Kubernetes

DevSecOps

BTP Security

Education

CISSP

CISM

SAP GRC Certification

Tools

SAP GRC Access Control

SAP S/4HANA Security

SAP Identity Services

Azure

Job description

Job Title: SAP Joule AI Security Architect

Location: Houston, TX – Onsite

Employment Type: Contract

Duration: 12 Months

Pay Range: $75/hr - $85/hr

About VLink:

Started in 2006 and headquartered in Connecticut, VLink is one of the fastest growing digital technology services and consulting companies. Since its inception, our innovative team members have been solving the most complex business, and IT challenges of our global clients.

Job Description:

Hands-on security architecture role responsible for the security posture of Joule deployments — access control, data governance, and risk — working directly with the business and IT to clear use cases for POC and production.

Key Responsibilities:

• Define and implement security architecture for Joule deployments, including authentication, authorization, and role-based access
• Design role-based access controls, least-privilege access, segregation of duties (SoD), and privileged/emergency access processes for AI administrators, developers, business users, and service accounts
• Assess data sensitivity and enforce data governance controls for each Joule use case
• Define controls to prevent unauthorized data exposure through prompts, AI agents, and integrations, and review AI use cases for data leakage and privacy concerns
• Partner with GRC to map Joule skills and access against governance, risk, and compliance requirements
• Define and maintain SAP AI security policies, standards, and governance frameworks, including approval and review processes for AI use cases before production deployment
• Perform hands-on security reviews and risk assessments for each POC prior to business rollout
• Conduct security reviews of custom AI agents, establish secure development lifecycle requirements, and define testing procedures for AI agent deployment and production release
• Design and implement monitoring, logging, and audit trails for Joule usage
• Validate secure configurations of AI services, APIs, integrations, and connectors, and support vulnerability management and remediation activities for SAP AI solutions
• Drive security, observability, performance, compliance, and operational excellence standards for enterprise AI solutions across POC and production environments
• Work directly with business stakeholders to explain and resolve security requirements without slowing delivery
• Partner with the functional and technical roles throughout qualification, POC, and deploymentKeep IT informed of security risks, exceptions, and remediation status
• Educate SAP teams on AI security risks and governance requirements, running workshops for developers, administrators, and business users, and developing guidance for secure prompt engineering and AI agent development
• Maintain security documentation and support internal and external audits

Qualifications:

• Hands-on security architecture experience in enterprise SAP or cloud environments
• Experience with SAP GRC and access control frameworks
• 5+ years of SAP Security and GRC experience, including SAP S/4HANA Security, SAP GRC Access Control, and SAP Identity Services
• Familiarity with AI/copilot-specific security risks, such as data leakage and prompt-based access issues
• Knowledge of AI security principles, machine learning risks, generative AI technologies, and AI governance frameworks, with experience implementing them in enterprise environments
• Experience with SAP BTP security model and Integration Suite security
• Experience securing cloud-native AI platforms using SAP BTP, SAP AI Core, Kubernetes, hyperscalers, DevSecOps practices, observability controls, and distributed system security patterns
• Familiarity with MCP Server environments hosted on SAP BTP, and the security implications of SAP AI Core, SAP AI Hub, and SAP AI Gateway integrations
• Experience with SAP Business AI, Joule, SAP AI Core, SAP AI Launchpad, and SAP BTP AI services, along with cloud platform experience such as Microsoft Azure
• Strong understanding of data governance and compliance requirements in an enterprise setting
• Ability to work directly and collaboratively with business and technical teams, not just in a gatekeeping capacity
• SAP Security, SAP GRC, CISSP, CISM, or cloud security certification

Equal Employment Opportunity (EEO) Statement:

VLink is an equal opportunity employer committed to fostering an inclusive environment where diversity is celebrated. All qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Employment is contingent upon successful completion of a background check.

This job application process may use AI-powered tools to assist in screening and evaluating applications based on objective, job-related qualifications. AI is used solely to support the recruitment process and all final hiring decisions are made exclusively by our human recruitment team.

Applicant information will be handled in accordance with VLink's privacy policy.