SAP Business Technology Platform (BTP) Security Architect Manager

SAP Business Technology Platform (BTP) Security Architect Manager

In this role, you will be designing and maintaining access model and governance related business processes based on information from stakeholders and identified needs. You will design and implement controls, manage partners/vendors, ensure stakeholders satisfaction, and promote an information security culture driven by risk considerations.

We are seeking an SAP Business Technology Platform (BTP) Manager with deep specialization in Security, Identity Management, and Access Governance to join our Identity and Access Governance team. The ideal candidate will be responsible for defining, implementing, and maintaining secure access models across our SAP BTP (mainly) and rest of SAP cloud landscapes, ensuring alignment with corporate compliance and SAP best practices.

You will collaborate closely with SAP Basis, IT Security, Functional (BTS) and Internal Controls teams to establish governance frameworks, role-based permissions, and integrations with SAP Cloud Identity Services.

As an SAP BTP Security Architect Manager, you will be responsible for:

BTP Security Architecture & Strategy:

• design and maintain the BTP security architecture, including subaccount structure, trust configuration, and connectivity to Identity Providers (IdPs).
• define and document security standards and governance models for multi-tenant SAP cloud environments.
• implement and optimize Identity Authentication (IAS) and Identity Provisioning (IPS) services.

Access & Role Management:

• design and maintain a sustainable BTP to facilitate maintenance of authorizations in the JTI SAP BTP landscape. (develop and maintain role-based access control (RBAC) and attribute-based access control (ABAC) model).
• act as interface between the different stakeholders (Business, IT, Compliance/Legal teams) to ensure alignment on the access design and the implementation plan.
• manage SAP Cloud security parameters and access, including administrators, developers, and integration users.
• coordinate with compliance teams to ensure adherence to SoD (Segregation of Duties) principles.
• look for improvement opportunities via automation of internal processes or leveraging existing system functionality.
• manage and transfer knowledge by designing training materials, training SAP security staff and other stakeholders.
• support integration with Identity and Access Management solutions (Identity IIQ/SailPoint preferred).

Governance & Compliance:

• define and implement SAP cloud security and Access Governance policies, procedures, and standards in alignment with enterprise IT security frameworks.
• design and implement new controls ensuring SAP BTP and cloud systems remain available, transactional integrity is guaranteed, data sensitivity and confidentiality requirements are met, and risks are considered.
• support audit activities by providing documentation, logs, and risk assessments.
• implement security monitoring and reporting using Security Bridge, SAP Cloud ALM, Audit Logs, and Security Analytics tools.

Integration & Automation:

• integrate SAP BTP with SAP Identity Access Governance (IAG), SAP Cloud Identity, and on-premises SAP systems (S/4HANA, BW/4HANA, etc.).
• automate user lifecycle management and access provisioning through APIs and scripting.
• collaborate with DevOps teams to embed security into CI/CD pipelines.

Advisory & Enablement:

• provide expert advice on BTP security topics to project teams and business stakeholders.
• deliver training sessions and internal knowledge transfer on BTP access management.

Requirements:

• 5+ years of experience in SAP Security and Identity Management.
• 3+ years hands-on experience with SAP BTP (Neo & Cloud Foundry environments).
• Strong understanding of SAP Cloud Identity Services (IAS, IPS) and SAP Identity Access Governance (IAG).
• Experience configuring trust relationships, OAuth2, SAML, and XSUAA authorizations.
• Knowledge on BTP cockpit administration, subaccount hierarchy, and entitlement management.