About this role

Design and implement SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS) architectures
Integrate SAP BTP with corporate IdPs (Azure AD, Entra ID, AD, LDAP, SAML, OAuth2, OpenID Connect)
Configure Single Sign-On (SSO), MFA, Conditional Access, and Trust configurations
Manage user lifecycle, role mapping, and automated provisioning/de-provisioning across SAP systems
Implement and govern SAP Cloud Identity Services (CIS) best practices
Define security standards for BTP applications, APIs, AI services, and integrations
Conduct security reviews, risk assessments, and audits for SAP BTP landscapes
Secure AI-enabled SAP services (e.g., SAP AI Core, AI Launchpad, Joule)
Ensure secure access to APIs, data, and AI models using OAuth2, XSUAA, and service bindings

10+ years in SAP Security with strong hands-on experience in SAP BTP
Deep expertise in IAS, IPS, and SAP Cloud Identity Services (CIS)
Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, JWT, X.509
Experience integrating SAP with Azure AD / Entra ID
Solid understanding of BTP security services (XSUAA, Destination Service, API Management)

SAP BTP Security Architect

Key skills