SAP BTP Security Resource

Role: SAP BTP Security Resource

Location: Raritan, NJ 3 days a week

Helps define the identity, access, network, and data protection architecture for BTP subaccounts, extensions, and integrations.

Work closely with cloud architects, developers, Basis/platform teams, and compliance stakeholders

Key Responsibilities:

Identity and access management

• Design and configure authentication and authorization using SAP Cloud Identity Services (IAS/IPS), including SSO and federation with corporate IdPs such as Azure AD/Entra ID and Okta.
• Define role collections, roles, and scopes, and manage authorizations via XSUAA and the Authorization & Trust Management service.
• Automate user and role provisioning and lifecycle management.
• Support SAP Cloud Identity Access Governance (IAG) for access reviews, SoD analysis, and privileged access.

Platform security and governance

• Define security standards for global accounts, directories, subaccounts, and spaces.
• Manage Cloud Foundry and Kyma security, including org/space roles, service keys, and secrets handling.
• Configure and manage Cloud Connector, destinations, and secure connectivity to on-premise and third-party systems.
• Apply secure network patterns such as private link, IP allow-listing, and mTLS.

Application and integration security

• Review and secure CAP, SAPUI5/Fiori, and Node.js/Java extensions (OAuth 2.0, JWT, CSRF, CORS, input validation).
• Secure SAP Integration Suite (API Management, Cloud Integration) with credential stores, certificates, and API policies.
• Partner with DevOps to embed security in CI/CD pipelines (SAST/DAST, dependency scanning, secrets management).

Data protection and compliance

• Implement encryption at rest and in transit, key management, and data masking where required.
• Support compliance with ISO 27001, SOC 1/2, GDPR, and internal policies, and provide evidence for audits.
• Review BTP audit logs and integrate them with SIEM tools (e.g., Splunk, Sentinel) via the Audit Log service.

Monitoring and incident response

• Define security monitoring, alerting, and incident response procedures for BTP.
• Run periodic security assessments and remediate findings.
• Track SAP Security Notes and BTP service updates and assess their impact.

Collaboration and documentation

• Produce security architecture documents, runbooks, and role design guides.
• Advise project teams on secure design and conduct security design reviews.
• Mentor developers and administrators on BTP security best practices.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• Hands-on experience with SAP BTP security (XSUAA, IAS/IPS, role collections, trust configuration).
• Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and PKI/certificates.
• Experience with Cloud Connector, destinations, and hybrid connectivity.
• Working knowledge of Cloud Foundry and/or Kyma, and of SAP Integration Suite security.
• Familiarity with SAP S/4HANA and SAP security concepts (roles, authorizations, GRC/IAG).
• Understanding of cloud security principles (least privilege, zero trust, defense in depth).
• Good communication skills and the ability to work with technical and non-technical stakeholders.

Preferred Qualifications

• SAP certifications (e.g., SAP Certified Associate – Backend Developer for SAP BTP, or SAP Certified Technology Associate – SAP BTP).
• Security certifications such as CISSP, CISM, CCSP, or Azure/AWS security certifications.
• Experience with SAP Cloud ALM, SAP Build, SAP Event Mesh, or SAP HANA Cloud security.
• Scripting and automation skills (Terraform, BTP CLI, Python, or Bash) and infrastructure-as-code for BTP.
• Exposure to SIEM integration, threat modeling, and penetration testing coordination.
• Experience in regulated industries (finance, pharma, public sector).

Key Competencies

• Analytical, with a risk-based approach to security decisions
• Strong ownership and attention to detail
• Ability to translate security requirements into practical technical controls
• Comfortable working in agile, multi-vendor environments

Thanks & Regards,

Vandana Shrivastava

US IT Recruiter

O: View phone number on click.appcast.io

E: View email address on click.appcast.io