SAP BTP Identity & Access Consultant

C5MI

. Configure and maintain SAP Cloud Identity Services for the Vendor Portal, including user onboarding, self-registration, password policies, and MFA .

Posted 11/9/2026full-timeRemote • United StatesMid-LevelSenior💰 $120,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SAP Cloud Identity Services configuration and maintenance, with a strong focus on user onboarding, access governance, and security compliance. Proficient in SAML 2.0, OpenID Connect, and securing SAP S/4HANA connectivity.

Highest-signal resume keywords

SAP Cloud Identity Services ConfigurationSAML 2.0 and OpenID ConnectSAP BTP IAS ConfigurationAccess Governance and Role ProvisioningSAP Cloud Connector Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SAP SecurityIdentity and Access ManagementUser OnboardingRole CollectionsMFAOAuth 2.0Principal PropagationBTP Subaccount SecurityAccess RequestsSegregation-of-Duties Checks

Tools & Technologies

SAP Build Work ZoneSAP CAP ApplicationsSAP Identity Provisioning ServiceBTP Connectivity

Industry Keywords

CybersecurityFederal Security RequirementsQuality AssuranceSensitive Information ProtectionGovernment Clearance

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Configure and maintain SAP Cloud Identity Services for the Vendor Portal, including user onboarding, self-registration, password policies, and MFA
Establish trust between BTP subaccounts, SAP IAS, and corporate identity providers using SAML 2.0 and OpenID Connect
Design and maintain role collections, user groups, and authorization models enforcing vendor data access restrictions
Configure secure access to SAP Build Work Zone and SAP CAP applications
Enable principal propagation and secure BTP connectivity to SAP S/4HANA Retail 2025 through SAP Cloud Connector
Support connected applications from a BTP security standpoint
Automate user and role provisioning with SAP Identity Provisioning Service
Support access governance, access requests, approvals, periodic reviews, and segregation-of-duties checks
Monitor sign-in issues and audit logs and resolve access incidents
Document security design, run negative and role-based testing, and support go-live and hypercare
Partner with integration developers, BASIS, and client security teams to meet program and federal security requirements
Participate in quality assurance activities and protect sensitive information according to security policies

Requirements

What you’ll need

Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent experience
5+ years of SAP security or identity and access management experience, including hands-on SAP BTP IAS configuration
Strong knowledge of SAML 2.0, OpenID Connect, OAuth 2.0, and MFA
Experience with BTP subaccount security, role collections, and trust configuration
Experience securing S/4HANA connectivity through SAP Cloud Connector, including principal propagation
Experience supporting external (B2B) user access for partner or supplier portals
Must be able to obtain and maintain an active government clearance (requires U.S. citizenship)

Benefits

Comp & perks

Medical coverage
Dental coverage
Vision coverage
Life insurance
Long-term disability coverage
401(k) plan
Bonus opportunities
Paid holidays
Paid time off
Personal development support
Equal Opportunity Employer