SAP BTP Security Resource

Role: SAP BTP Security ResourceLocation: Raritan, NJ 3 days a weekHelps define the identity, access, network, and data protection architecture for BTP subaccounts, extensions, and integrations.Work closely with cloud architects, developers, Basis/platform teams, and compliance stakeholdersKey Responsibilities:Identity and access managementDesign and configure authentication and authorization using SAP Cloud Identity Services (IAS/IPS), including SSO and federation with corporate IdPs such as Azure AD/Entra ID and Okta.Define role collections, roles, and scopes, and manage authorizations via XSUAA and the Authorization & Trust Management service.Automate user and role provisioning and lifecycle management.Support SAP Cloud Identity Access Governance (IAG) for access reviews, SoD analysis, and privileged access.Platform security and governanceDefine security standards for global accounts, directories, subaccounts, and spaces.Manage Cloud Foundry and Kyma security, including org/space roles, service keys, and secrets handling.Configure and manage Cloud Connector, destinations, and secure connectivity to on-premise and third-party systems.Apply secure network patterns such as private link, IP allow-listing, and mTLS.Application and integration securityReview and secure CAP, SAPUI5/Fiori, and Node.js/Java extensions (OAuth 2.0, JWT, CSRF, CORS, input validation).Secure SAP Integration Suite (API Management, Cloud Integration) with credential stores, certificates, and API policies.Partner with DevOps to embed security in CI/CD pipelines (SAST/DAST, dependency scanning, secrets management).Data protection and complianceImplement encryption at rest and in transit, key management, and data masking where required.Support compliance with ISO 27001, SOC 1/2, GDPR, and internal policies, and provide evidence for audits.Review BTP audit logs and integrate them with SIEM tools (e.g., Splunk, Sentinel) via the Audit Log service.Monitoring and incident responseDefine security monitoring, alerting, and incident response procedures for BTP.Run periodic security assessments and remediate findings.Track SAP Security Notes and BTP service updates and assess their impact.Collaboration and documentationProduce security architecture documents, runbooks, and role design guides.Advise project teams on secure design and conduct security design reviews.Mentor developers and administrators on BTP security best practices.Required QualificationsBachelor’s degree in Computer Science, Information Security, or equivalent experience.Hands-on experience with SAP BTP security (XSUAA, IAS/IPS, role collections, trust configuration).Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and PKI/certificates.Experience with Cloud Connector, destinations, and hybrid connectivity.Working knowledge of Cloud Foundry and/or Kyma, and of SAP Integration Suite security.Familiarity with SAP S/4HANA and SAP security concepts (roles, authorizations, GRC/IAG).Understanding of cloud security principles (least privilege, zero trust, defense in depth).Good communication skills and the ability to work with technical and non-technical stakeholders.Preferred QualificationsSAP certifications (e.g., SAP Certified Associate – Backend Developer for SAP BTP, or SAP Certified Technology Associate – SAP BTP).Security certifications such as CISSP, CISM, CCSP, or Azure/AWS security certifications.Experience with SAP Cloud ALM, SAP Build, SAP Event Mesh, or SAP HANA Cloud security.Scripting and automation skills (Terraform, BTP CLI, Python, or Bash) and infrastructure-as-code for BTP.Exposure to SIEM integration, threat modeling, and penetration testing coordination.Experience in regulated industries (finance, pharma, public sector).Key CompetenciesAnalytical, with a risk-based approach to security decisionsStrong ownership and attention to detailAbility to translate security requirements into practical technical controlsComfortable working in agile, multi-vendor environmentsThanks &