SAP Security Engineer – IAM, Cloud, & Compliance

Jobtailor; Dearborn (MO); On-site; USD 120,000 - 150,000; Full time

Job summary

Jobtailor is seeking an experienced SAP Security professional to design, implement, and audit security controls across SAP landscapes, including S/4HANA, BTP, and Rise with SAP on public clouds.

You will drive provisioning, MFA, SSO, and federated identity, and lead incident response in collaboration with GRC analysts and cloud architects. A strong background in compliance and least-privilege design is essential.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent work experience.
• 3–5 years dedicated SAP Security experience including hands-on with SAP GRC or IAG.
• Experience securing SAP workloads in public cloud and understanding cloud security, IAM policies, and network security.

Responsibilities

• Design, configure, and maintain SAP security controls and SoD policies within SAP landscapes.
• Partner with infrastructure and cloud teams to secure SAP environments hosted on public clouds.
• Implement and optimize user provisioning, SSO, MFA, and federated identity flows for SAP systems and cloud integrations.
• Conduct vulnerability assessments and security audits of SAP infrastructure and database layers (HANA).
• Translate cybersecurity requirements into SAP baselines ensuring SOC 2, ISO 27001 compliance.
• Define, audit, and manage SAP roles, authorization objects, and Firefighter procedures for least-privilege security.
• Act as SME for SAP security incidents and lead rapid investigations and remediation.
• Collaborate with SAP functional teams and external partners to ensure secure-by-design SAP deployments.

Skills

SAP Security

IAM

Public Cloud Security

SoD Analysis

Education

Bachelor/Master in CS/IT/Cybersecurity

Tools

SAP GRC

SAP IAG

SAP IAS/IPS

Job description

Jobtailor is seeking an experienced SAP Security professional to design, implement, and audit security controls across SAP landscapes, including S/4HANA, BTP, and Rise with SAP on public clouds.

You will drive provisioning, MFA, SSO, and federated identity, and lead incident response in collaboration with GRC analysts and cloud architects. A strong background in compliance and least-privilege design is essential.