SAP BTP Identity & Access Consultant
C5miinsightllc · Remote - United States
About this role
**C5MI — SAP BTP Identity & Access Consultant** ## Position Summary The SAP BTP Identity & Access (IAS) Consultant designs, configures, and supports identity and access management for a custom Vendor Portal built on SAP Business Technology Platform (BTP). You’ll ensure external vendors and brokers sign in securely, access only authorized data, and connect seamlessly to SAP S/4HANA and integrated applications. As the subject-matter contributor for portal identity and security, you’ll own authorization design and partner with integration, BASIS, and client security teams to meet program and federal security requirements. ## Essential Functions & Responsibilities - Configure and maintain **SAP Cloud Identity Services** (Identity Authentication, Identity Provisioning, Identity Directory) for the Vendor Portal, including onboarding, self-registration, password policies, and **MFA**. - Establish trust between **BTP subaccounts**, **SAP Identity Authentication Service (IAS)**, and the client’s corporate identity provider using **SAML 2.0** and **OpenID Connect**. - Design and maintain **role collections**, user groups, and authorization models so vendors see only their own data (e.g., business partner details, contracts, site groups, article lists, purchase orders, bill back agreements). - Configure secure access to **SAP Build Work Zone** and **SAP CAP** applications that make up the portal. - Enable principal propagation and secure connectivity from BTP to **SAP S/4HANA Retail 2025** via **SAP Cloud Connector**. - Support connected applications from a BTP security standpoint (where supported). - Automate user and role provisioning with **SAP Identity Provisioning Service**. - Support access governance: access requests, approvals, periodic access reviews, and segregation-of-duties checks. - Monitor sign-in issues and audit logs; resolve access incidents quickly to keep the portal running reliably. - Document security design, run test cycles (including negative and role-based testing), and support go-live and hypercare. - Partner with integration developers, BASIS, and client security teams to meet program and federal security requirements. - Follow certified processes to maintain quality and information security, including protecting sensitive information per security policies. ## Minimum Requirements - Bachelor’s degree in computer science, information systems, cybersecurity, or related field (or equivalent experience). - **5+ years** of SAP security / identity & access management experience, including hands-on **SAP BTP IAS** configuration. - Strong knowledge of **SAML 2.0**, **OpenID Connect**, **OAuth 2.0**, and **MFA**. - Experience with **BTP subaccount security**, role collections, and trust configuration. - Experience securing **S/4HANA connectivity** through **SAP Cloud Connector**, including principal propagation. - Experience supporting external (B2B) user access for partner/supplier portals. - Ability to obtain and maintain an active **government clearance** (requires **U.S. citizenship**). ## Nice to Have - Experience with **SAP Cloud Identity Access Governance (IAG)** or **Microsoft Entra ID Governance**. - Experience integrating SAP Cloud Identity Services with an enterprise identity provider (e.g., Microsoft Entra ID). - Experience with **SAP Build Work Zone** and **CAP application security (XSUAA)**. - Experience with **S/4HANA** role and authorization design (**PFCG**). - Experience with federal security frameworks such
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.