SAP Platform Security Architect

Ford Motor

Dearborn (MI)

Hybrid

USD 74,300 - 166,200

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Vehicle discount program

Tuition assistance

Paid time off

Holidays

Parental leave

Hybrid work arrangement

Job summary

Ford Motor Company seeks a SAP Platform Security Architect to define, govern, and evolve the enterprise security architecture for a large-scale SAP RISE environment, supporting Purchasing, Finance, Treasury, Material Management & Planning (MMP), and more than 60 Agile Product Teams.

This role partners with Enterprise Architecture, Product Teams, Platform Engineering, Identity Services, Cybersecurity, Infrastructure, and Business stakeholders to ensure SAP security is implemented consistently

Qualifications

Bachelor's degree or equivalent required.

Responsibilities

Define, govern, and evolve the enterprise security architecture for SAP RISE across cloud and hybrid environments.
Lead architecture reviews and governance for SAP capabilities and 60+ product teams.
Design and govern enterprise identity architecture (IAS, IPS, Access Control, IAS, IAG) and related security controls.

Education

Bachelor's degree or equivalent

Job description

SAP Platform Security Architect (SAP RISE)

Position Summary

The SAP Platform Security Architect is responsible for defining, governing, and evolving the enterprise security architecture for a large-scale SAP RISE environment supporting Purchasing, Finance, Treasury, Material Management & Planning (MMP), and more than 60 Agile Product Teams. This role establishes enterprise security standards, architecture patterns, governance, and technical direction to ensure secure, scalable, and compliant SAP platforms.

The architect partners with Enterprise Architecture, Product Teams, Platform Engineering, Identity Services, Cybersecurity, Infrastructure, and Business stakeholders to ensure SAP security is implemented consistently across cloud and hybrid environments while enabling rapid delivery of business capabilities.

This role is accountable for the long-term security strategy of the SAP platform rather than day-to-day operational security administration.

Responsibilities

Primary Responsibilities

Enterprise SAP Security Architecture
Define the enterprise SAP Security Reference Architecture.
Develop security patterns for SAP RISE and hybrid landscapes.
Govern security architecture across more than 60 product teams.
Establish platform security standards and reusable design patterns.
Lead architecture reviews for new SAP capabilities.
Define security guardrails for all SAP products.
Ensure alignment with Enterprise Architecture principles.
Maintain platform security roadmaps.
SAP Identity and Access Management
Design and govern enterprise identity architecture including:
SAP Identity Authentication Service (IAS)
SAP Identity Provisioning Service (IPS)
SAP Access Control
SAP Cloud Identity Services
SAP Identity Access Governance (IAG)
Privileged Access Management integration
Single Sign-On (SSO)
OAuth 2.0
OpenID Connect
SAML
Business role architecture
Technical role architecture
Authorization Objects
CDS Authorization
Embedded Analytics security
SAP RISE Security
Provide architecture and governance for:
SAP S/4HANA RISE
SAP Business Technology Platform (BTP)
SAP Integration Suite
SAP Build
SAP Build Process Automation
SAP Event Mesh
SAP Work Zone
SAP Joule and AI capabilities
SAP Datasphere
SAP Analytics Cloud
Platform Security Governance
Establish governance across all Product Teams by:
Reviewing architecture designs.
Defining secure implementation patterns.
Maintaining security standards.
Driving architecture consistency.
Reviewing exception requests.
Managing technical debt.
Publishing reference architectures.
Leading security design reviews.
Approving security architecture decisions.
Security Risk Management
Segregation of Duties (SoD)
Sensitive Access
Emergency Access (Firefighter)
Privileged Access
Critical Transaction Monitoring
Threat Modeling
Security Exception Management
Audit Readiness
Compliance Reporting
Private Link
Secure connectivity
Encryption at rest
Encryption in transit
Key Management
Certificate Management
Secrets Management
API Security
WAF integration
Reverse Proxy
Secure Internet Access
AI Security
Define security architecture for:
SAP Joule
AI Agents
Generative AI
AI Governance
Model Access Controls
Data Privacy
Responsible AI
Agent-to-Agent integrations
DevSecOps
Develop secure engineering practices including:
CI/CD security
Transport governance
Static code analysis
Security testing
Infrastructure as Code security
Automated compliance validation
Release governance
Platform Governance Across Product Teams
Provide architecture oversight for over 60 Product Teams supporting:
Purchasing
Finance
Treasury
Material Management & Planning (MMP)
Logistics
Manufacturing
Analytics
Master Data
Responsibilities include:
Design approvals
Security standards
Security roadmaps
Product team guidance
Technical mentoring

Qualifications

Immediate medical, dental, vision and prescription drug coverage
Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
Vehicle discount program for employees and family members and management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
Paid time off and the option to purchase additional vacation time.

This position is a salary grade 6-8 and ranges from $74,300-$166,200.

Visa sponsorship is not available for this position.

Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.

This position is hybrid. Candidates who are in commuting distance to a Ford hub location may be required to be onsite four or more days per week.

#LI-Hybrid

#LI-GR1

About Us

At Ford Motor Company, we believe freedom of movement drives human progress. With our incredible plans for the future of mobility, we have a wide variety of opportunities for you to accelerate your career and help us define tomorrow’s transportation.

About the Team

We believe that freedom of movement drives human progress. Ford Information Technology (IT) is shaping the future of mobility by redefining the transportation landscape, enhancing the customer experience and improving people’s lives. Join the Ford family as we change the way the world moves.

Job Info