SAP Security Engineer

Jobtailor; Dearborn (MO); On-site; USD 120,000 - 150,000; Full time

Job summary

Jobtailor is seeking an experienced SAP Security professional to design, implement, and audit security controls across SAP landscapes, including S/4HANA, BTP, and Rise with SAP on public clouds.

You will drive provisioning, MFA, SSO, and federated identity, and lead incident response in collaboration with GRC analysts and cloud architects. A strong background in compliance and least-privilege design is essential.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent work experience.
• 3–5 years dedicated SAP Security experience including hands-on with SAP GRC or IAG.
• Experience securing SAP workloads in public cloud and understanding cloud security, IAM policies, and network security.

Responsibilities

• Design, configure, and maintain SAP security controls and SoD policies within SAP landscapes.
• Partner with infrastructure and cloud teams to secure SAP environments hosted on public clouds.
• Implement and optimize user provisioning, SSO, MFA, and federated identity flows for SAP systems and cloud integrations.
• Conduct vulnerability assessments and security audits of SAP infrastructure and database layers (HANA).
• Translate cybersecurity requirements into SAP baselines ensuring SOC 2, ISO 27001 compliance.
• Define, audit, and manage SAP roles, authorization objects, and Firefighter procedures for least-privilege security.
• Act as SME for SAP security incidents and lead rapid investigations and remediation.
• Collaborate with SAP functional teams and external partners to ensure secure-by-design SAP deployments.

Skills

SAP Security

IAM

Public Cloud Security

SoD Analysis

Education

Bachelor/Master in CS/IT/Cybersecurity

Tools

SAP GRC

SAP IAG

SAP IAS/IPS

Job description

Responsibilities

• Design, configure, and maintain secure access controls and segregation of duties (SoD) policies using SAP Identity Access Governance (IAG) and SAP Cloud Identity Services (IAS/IPS).
• Partner with infrastructure and cloud engineering teams to secure SAP landscapes (such as SAP S/4HANA, BTP, and RISE with SAP) hosted on public cloud platforms.
• Implement and optimize user provisioning, single sign-on (SSO), multi-factor authentication (MFA), and federated identity flows between SAP systems, public clouds, and enterprise identity providers (e.g., Microsoft Entra ID).
• Conduct regular vulnerability assessments, security audits, and configuration reviews of public cloud SAP infrastructure and database layers (HANA security).
• Translate corporate cybersecurity requirements into concrete SAP security baselines, ensuring compliance with internal policies and external regulatory standards (e.g., SOC 2, ISO 27001).
• Define, build, and audit SAP business roles, authorization objects, and emergency access management (Firefighter) procedures to maintain a least-privilege security posture.
• Act as the subject matter expert for SAP-related security incidents, assisting in rapid investigation, forensic analysis, and the implementation of permanent remediation measures.
• Work closely with SAP functional teams, enterprise GRC analysts, cloud architecture teams, and external integration partners to ensure secure-by-design SAP deployments.

Requirements

• Minimum of 3–5 years of dedicated experience in SAP Security, including hands‑on experience with SAP GRC or SAP Identity Access Governance (IAG).
• Experience securing SAP workloads deployed in public cloud environments, including strong understanding of cloud infrastructure security, network security groups, and IAM policies.
• Practical experience implementing and configuring SAP Cloud Identity Services (Identity Authentication / Identity Provisioning) and enterprise IAM solutions.
• Deep technical knowledge of SAP security architectures, authorization objects, role design (single, composite, and derived roles), and segregation of duties (SoD) analysis.
• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent relevant work experience.

Preferred

• SAP Certified Technology Associate – SAP System Security and Authorizations, or cloud‑specific security certifications.
• Hands‑on experience with SAP Business Technology Platform (BTP) security configurations and RISE with SAP compliance frameworks.
• Experience in highly regulated industries such as Renewable Energy, Automotive, or manufacturing operations.
• Experience configuring SAP Enterprise Threat Detection (ETD) or integrating SAP security logs with enterprise SIEM platforms (e.g., Microsoft Sentinel, SCC, Elastic).

Core Competencies

Demonstrates expertise in SAP Cloud Security and Governance, with a strong focus on Identity and Access Management (IAM) and compliance monitoring. Proficient in implementing security measures for SAP workloads in public cloud environments, ensuring adherence to regulatory standards.