SAP S/4HANA Cloud IAM Lead

Job Summary

Lead SAP S/4HANA Cloud Public Edition security, identity, authorization, and access governance.

Own business-role design, user lifecycle management, SAP Cloud Identity Services integration, SoD controls, audit compliance, production support, and security release management.

Key Responsibilities

• Design and govern SAP business roles, business catalogs, IAM apps, restriction types, and authorization groups.
• Manage user provisioning, deprovisioning, role assignments, and joiner-mover-leaver processes.
• Govern SAP Cloud Identity Services (IAS/IPS), SSO, identity federation, and enterprise IAM integration.
• Implement least-privilege access, segregation-of-duties controls, access reviews, and risk remediation.
• Troubleshoot production authorization, authentication, and provisioning issues.
• Lead security regression testing, SAP release-impact assessments, and access audits.
• Coordinate with Corporate IAM, SAP functional teams, BTP, Risk, Compliance, and Internal Audit.

Required Skills

• 12+ years of SAP Security, Authorization, or IAM experience.
• Hands-on SAP S/4HANA Cloud Public Edition security and role-design experience preferred.
• Strong knowledge of business roles, catalogs, restrictions, authorization groups, and SAP Fiori security.
• Experience with SAP Cloud Identity Services (IAS/IPS), SSO, SAML/OIDC, and identity provisioning.
• Knowledge of SoD, RBAC, least privilege, access certification, and ITSOX controls.
• Strong production support, troubleshooting, audit, and stakeholder-management skills.

Preferred Qualifications

• Experience with SAP Cloud IAG or enterprise GRC/IGA tools.
• Microsoft Entra ID integration experience.
• Exposure to SAP BTP, Ariba, Fieldglass, and SAP Cloud ALM.
• Knowledge of ISO 27001, NIST, and ITIL practices.
• Education: Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.