Recently postedTechnology

Hiring | SAP Security Lead in Foster City, CA

Centillion InfotechFoster City, CA🇺🇸United States

Quick overview

SeniorityMid Senior

Work modeOn Site

LocationFoster City, CA, United States

PythonPowerShellAnsibleSSOMFAGDPR

Job description

Greetings from Centillion Infotech LLC.,

Job Title: SAP Security Lead
Location: Foster City, CA (Onsite from Day 1).
Duration: Long term contract

Key Responsibilities:

SAP BRIM Security Architecture: Design, build, and maintain role-based access control (RBAC) across the SAP BRIM landscape, including Subscription Order Management (SOM), Convergent Charging (CC), Convergent Invoicing (CI), and Contract Accounting (FI-CA).
Segregation of Duties (SoD) & Compliance: Define, analyze, and enforce SoD matrices tailored for subscription-to-cash processes; conduct regular access risk analyses (ARA) using SAP IAG Access Analysis Service.
SAP IAG Deployment & Administration: Configure and manage SAP Cloud IAG modules—including Access Request Service (ARS), Access Analysis Service (AAS), Access Certification Service (ACS), and Privileged Access Management (PAM).
Cloud & Hybrid Identity Integration (SAP CIS): Configure SAP Cloud Identity Services, leveraging Identity Authentication Service (IAS) for SSO/MFA and Identity Provisioning Service (IPS) to synchronize identities and authorizations across SAP BTP, S/4HANA, and non-SAP solutions.
Privileged Access & Emergency Management: Implement and oversee emergency access workflows (Firefighter/PAM) across BRIM and cloud systems to ensure emergency activity logging and review compliance.
User Lifecycle Management: Automate user onboarding, role assignments, changes, and offboarding across cloud and on-premises systems using SAP IAG and IPS workflows.
Audit Support & Access Recertification: Execute periodic user access certifications (UAC) via IAG, generate audit-ready compliance reports, and interface with internal/external auditors to ensure compliance

Required Qualifications & Experience

Total Experience: 8–10+ years of dedicated SAP Security and GRC/IAG experience.
Lead Experience: 3+ years in a Senior, Lead, or Architect capacity designing access controls, single sign-on (SSO), and governance models for enterprise SAP transformations.
Domain Focus: At least 2 full-lifecycle S/4HANA Security & Fiori architecture and experience in SAP BRIM and 2+ deployment/migration projects involving SAP BTP, SAP Cloud Identity Services (CIS) and SAP IAG. Good to have exposure to FSM Preferred Skills
Hands-on experience with cross-cloud identity federation using external IdPs like Microsoft Entra ID or Okta alongside SAP CIS.
Familiarity with DevSecOps and automation tools (Python, PowerShell, Ansible, CI/CD pipelines) for SAP security deployments.
Exposure to SAP Enterprise Architecture tools (Signavio, EAD) and Data Privacy frameworks (ILM, Read Access Logging, GDPR/CCPA).

Centillion Infotech LLC is an equal opportunity employer and does not discriminate on the basis of race, color, gender, religion, age, sexual orientation, national origin or citizenship status or ethnic origin, disability, marital status, veteran status or any other occupationally irrelevant criteria.