SAP BTP Security Resource

Job Description

Role: SAP BTP Security Resource

Location: Raritan, NJ 3 days a week

Helps define the identity, access, network, and data protection architecture for BTP subaccounts, extensions, and integrations.

Work closely with cloud architects, developers, Basis/platform teams, and compliance stakeholders

Key Responsibilities:

Identity and access management

\n
• Design and configure authentication and authorization using SAP Cloud Identity Services (IAS/IPS), including SSO and federation with corporate IdPs such as Azure AD/Entra ID and Okta.
\n
• Define role collections, roles, and scopes, and manage authorizations via XSUAA and the Authorization & Trust Management service.
\n
• Automate user and role provisioning and lifecycle management.
\n
• Support SAP Cloud Identity Access Governance (IAG) for access reviews, SoD analysis, and privileged access.
\n

Platform security and governance

\n
• Define security standards for global accounts, directories, subaccounts, and spaces.
\n
• Manage Cloud Foundry and Kyma security, including org/space roles, service keys, and secrets handling.
\n
• Configure and manage Cloud Connector, destinations, and secure connectivity to on-premise and third-party systems.
\n
• Apply secure network patterns such as private link, IP allow-listing, and mTLS.
\n

Application and integration security

\n
• Review and secure CAP, SAPUI5/Fiori, and Node.js/Java extensions (OAuth 2.0, JWT, CSRF, CORS, input validation).
\n
• Secure SAP Integration Suite (API Management, Cloud Integration) with credential stores, certificates, and API policies.
\n
• Partner with DevOps to embed security in CI/CD pipelines (SAST/DAST, dependency scanning, secrets management).
\n

Data protection and compliance

\n
• Implement encryption at rest and in transit, key management, and data masking where required.
\n
• Support compliance with ISO 27001, SOC 1/2, GDPR, and internal policies, and provide evidence for audits.
\n
• Review BTP audit logs and integrate them with SIEM tools (e.g., Splunk, Sentinel) via the Audit Log service.
\n

Monitoring and incident response

\n
• Define security monitoring, alerting, and incident response procedures for BTP.
\n
• Run periodic security assessments and remediate findings.
\n
• Track SAP Security Notes and BTP service updates and assess their impact.
\n

Collaboration and documentation

\n
• Produce security architecture documents, runbooks, and role design guides.
\n
• Advise project teams on secure design and conduct security design reviews.
\n
• Mentor developers and administrators on BTP security best practices.
\n

Required Qualifications

\n
• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
\n
• Hands-on experience with SAP BTP security (XSUAA, IAS/IPS, role collections, trust configuration).
\n
• Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and PKI/certificates.
\n
• Experience with Cloud Connector, destinations, and hybrid connectivity.
\n
• Working knowledge of Cloud Foundry and/or Kyma, and of SAP Integration Suite security.
\n
• Familiarity with SAP S/4HANA and SAP security concepts (roles, authorizations, GRC/IAG).
\n
• Understanding of cloud security principles (least privilege, zero trust, defense in depth).
\n
• Good communication skills and the ability to work with technical and non-technical stakeholders.
\n

Preferred Qualifications

\n
• SAP certifications (e.g., SAP Certified Associate – Backend Developer for SAP BTP, or SAP Certified Technology Associate – SAP BTP).
\n
• Security certifications such as CISSP, CISM, CCSP, or Azure/AWS security certifications.
\n
• Experience with SAP Cloud ALM, SAP Build, SAP Event Mesh, or SAP HANA Cloud security.
\n
• Scripting and automation skills (Terraform, BTP CLI, Python, or Bash) and infrastructure-as-code for BTP.
\n
• Exposure to SIEM integration, threat modeling, and penetration testing coordination.
\n
• Experience in regulated industries (finance, pharma, public sector).
\n

Key Competencies

\n
• Analytical, with a risk-based approach to security decisions
\n
• Strong ownership and attention to detail
\n
• Ability to translate security requirements into practical technical controls
\n
• Comfortable working in agile, multi-vendor environments
\n

Thanks & Regards,

Vandana Shrivastava

US IT Recruiter

O: View phone number on ziprecruiter.com

E: View email address on ziprecruiter.com