SAP Security Engineer, Ford Energy

Socket.dev; Dearborn, Northern (MI, KY); Hybrid; USD 65,000 - 166,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Tuition assistance

Family care benefits

Vehicle discount program

Job summary

Ford Motor Company in Dearborn, MI seeks an SAP Security Specialist (GSR Level) with deep expertise in SAP Identity Access Governance (IAG) and public cloud SAP deployments. You will design, implement, and maintain robust security architectures and access controls across our SAP landscape for secure migration and operations.

The role requires experience with SAP GRC/IAG, SAP IAS/IPS, and SSO/MFA across SAP and cloud services, plus collaboration with GRC analysts and cloud teams.

Qualifications

• Minimum 3–5 years of SAP Security experience, incl. GRC/IAG.
• Cloud security experience with SAP workloads in public clouds.
• Experience implementing SAP Cloud Identity Services and IAM solutions.
• Deep knowledge of SAP security architectures, roles, and SoD analysis.
• Bachelor’s/Master’s in a relevant field or equivalent work exp.

Responsibilities

• Design and maintain secure access controls across SAP landscape.
• Secure SAP deployments in public cloud platforms (S/4HANA, BTP, RISE with SAP).
• Implement IAM features: SSO, MFA, user provisioning, federated identity.
• Conduct vulnerability assessments and security audits of SAP infra.
• Define SAP roles, authorization objects, and emergency access procedures.
• Collaborate with SAP teams, GRC analysts, and cloud engineers.

Skills

SAP Security

GRC / IAG

IAM

Cloud Security

SoD

Education

Bachelor’s or Master’s degree in Computer Science/IT/Cybersecurity

Tools

SAP Cloud Identity Services

Identity Authentication

Identity Provisioning

ETD

SIEM integrations

Job description

In this position... We are seeking an SAP Security Specialist (GSR Level) with deep expertise in SAP Identity Access Governance (IAG) and public cloud SAP deployments. In this role, you will be responsible for designing, implementing, and maintaining robust security architectures and access controls across our SAP landscape, ensuring secure migration and operations of critical enterprise systems hosted in public cloud environments.

Responsibilities

What you'll do...

Key Responsibilities

• SAP Cloud Security & Governance: Design, configure, and maintain secure access controls and segregation of duties (SoD) policies using SAP Identity Access Governance (IAG) and SAP Cloud Identity Services (IAS/IPS).
• Public Cloud SAP Deployments: Partner with infrastructure and cloud engineering teams to secure SAP landscapes (such as SAP S/4HANA, BTP, and RISE with SAP) hosted on public cloud platforms.
• Identity & Access Management (IAM): Implement and optimize user provisioning, single sign-on (SSO), multi-factor authentication (MFA), and federated identity flows between SAP systems, public clouds, and enterprise identity providers (e.g., Microsoft Entra ID).
• Vulnerability & Compliance Monitoring: Conduct regular vulnerability assessments, security audits, and configuration reviews of public cloud SAP infrastructure and database layers (HANA security).
• Policy & Control Enforcement: Translate corporate cybersecurity requirements into concrete SAP security baselines, ensuring compliance with internal policies and external regulatory standards (e.g., SOC 2, ISO 27001).
• Role Design & Administration: Define, build, and audit SAP business roles, authorization objects, and emergency access management (Firefighter) procedures to maintain a least-privilege security posture.
• Incident Support & Remediation: Act as the subject matter expert for SAP-related security incidents, assisting in rapid investigation, forensic analysis, and the implementation of permanent remediation measures.
• Collaboration: Work closely with SAP functional teams, enterprise GRC analysts, cloud architecture teams, and external integration partners to ensure secure-by-design SAP deployments.

Qualifications

You'll have… Required

• Experience: Minimum of 3–5 years of dedicated experience in SAP Security, including hands‑on experience with SAP GRC or SAP Identity Access Governance (IAG).
• Cloud Security: Demonstrated experience securing SAP workloads deployed in public cloud environments, including a strong understanding of cloud infrastructure security, network security groups, and IAM policies.
• Access Management Tools: Practical experience implementing and configuring SAP Cloud Identity Services (Identity Authentication / Identity Provisioning) and enterprise IAM solutions.
• SAP Authorization Concepts: Deep technical knowledge of SAP security architectures, authorization objects, role design (single, composite, and derived roles), and Segregation of Duties (SoD) analysis.
• Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent related work experience.

Even better, you may have…

Preferred

• SAP Certified Technology Associate - SAP System Security and Authorizations, or cloud‑specific security certifications.
• Hands‑on experience with SAP Business Technology Platform (BTP) security configurations and RISE with SAP compliance frameworks.
• Experience in highly regulated industries such as Renewable Energy, Automotive, or manufacturing operations.
• Experience configuring SAP Enterprise Threat Detection (ETD) or integrating SAP security logs with enterprise SIEM platforms (e.g., Microsoft Sentinel, SCC, Elastic).

Leadership Attributes

• A collaborative, detail‑oriented technical expert capable of navigating complex enterprise systems and driving secure cloud modernization strategies.

Location & Travel

• Location: Dearborn, MI- This position is hybrid-friendly for candidates with a proven ability to deliver results in a flexible environment.
• Travel Expectations: Occasional travel to support suppliers, test houses, and customer sites

You may not check every box, or your experience may look a little different from what we've outlined.

As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including:

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
• Paid time off and the option to purchase additional vacation time.

This position is a salary grade 5 – 8 and ranges from $65,100-$166,200.

Final determination of salary grade will be based on candidate's skills and experience, and base salary will be set within the applicable range according to job scope, responsibility and competitive market value.

Visa sponsorship is not available for this position.

Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.

This position is hybrid. Candidates who are in commuting distance to a Ford hub location may be required to be onsite four or more days per week.

Company: As Ford establishes a wholly owned subsidiary focused on Battery Energy Storage Systems, this role will initially be employed by Ford and is expected to transition to the subsidiary within one year.