SAP Architect - IAG Cloud Solutions (5-10 yrs)

Role : SAP Cloud IAG

Mode : Remote

NP : Immediate Joiner

CTC : Open

Roles and Responsibilities :

1. Access Governance Design :

- Collaborate with stakeholders to understand business requirements and design SAP Cloud IAG solutions.

- Develop and implement access governance frameworks to ensure compliance with security policies and regulations.

2. Identity Lifecycle Management :

- Design and implement processes for identity provisioning, de-provisioning, and lifecycle management within SAP Cloud environments.

- Define and enforce access control policies based on user roles, responsibilities, and business needs.

3. Integration with SAP Cloud Solutions :

- Ensure seamless integration of SAP Cloud IAG with various SAP Cloud applications and services.

- Collaborate with SAP consultants to align access governance processes with the specific features of SAP Cloud solutions.

4. Role Design and Management :

- Develop role-based access control (RBAC) models and design roles that align with organizational structures and business processes.

- Implement mechanisms for role certification and periodic access reviews to maintain the integrity of access controls.

5. Compliance Monitoring :

- Establish and monitor compliance controls within SAP Cloud IAG to meet regulatory and internal compliance requirements.

- Conduct regular audits and assessments to ensure adherence to security policies.

6. Incident Response and Mitigation :

- Develop and implement incident response plans for unauthorized access or security breaches.

- Collaborate with security teams to investigate and mitigate security incidents within the SAP Cloud environment.

7. User Training and Awareness :

- Develop training programs for end-users and administrators to promote awareness of security best practices and access governance policies.

- Provide ongoing support and guidance to users and administrators on SAP Cloud IAG functionalities.

8. Documentation and Reporting :

- Create comprehensive documentation for SAP Cloud IAG configurations, policies, and procedures.

- Generate regular reports on access governance activities, compliance status, and security incidents.

Qualification Required :

- Bachelor's or Master's degree in Computer Science or related field

- Relevant certifications in SAP Cloud security and access governance are a plus.

Key Skills Required :

- Min 2 years of experience in SAP Cloud IAG architecture, implementation and administration.

- In-depth knowledge of identity and access management principles and best practices.

- Strong understanding of SAP Cloud security features and services.

- Relevant certifications in SAP Cloud security and access governance are a plus.

Mandatory Skill Description :

- Identity and Access Management (IAM) In-depth knowledge of IAM principles, including authentication, authorization, and single sign-on (SSO).

- SAP Cloud Platform (SCP) Understanding of SCP architecture, services, and integration capabilities.

- SAP Cloud Identity (SCI) Proficiency in configuring and managing user provisioning, SSO, and identity federation.

- SAP Cloud Identity Access Governance (IAG) Hands-on experience with IAG features, including role-based access control (RBAC), access request and approval workflows, access reviews, and risk analysis.

- Security Protocols and Standards Knowledge of security protocols (e.g., OAuth, SAML, OpenID Connect) and industry standards (e.g., NIST, CIS).

- Scripting and Automation Proficiency in scripting languages (e.g., PowerShell, Python) for automation tasks and integration with other systems.

- Problem-Solving and Analytical Skills Ability to analyze complex security issues, identify root causes, and implement effective solutions.

- Communication and Collaboration Strong communication skills to effectively collaborate with technical and non-technical stakeholders.

- Export to Sheets

Note : While not explicitly mentioned in the job posting, certifications in SAP Cloud Security and Access Governance can significantly enhance your candidacy.