Role: SAP BTP Security Resource
Location: Raritan, NJ 3 days a week
Helps define the identity, access, network, and data protection architecture for BTP subaccounts, extensions, and integrations.
Work closely with cloud architects, developers, Basis/platform teams, and compliance stakeholders
Key Responsibilities:
Identity and access management
- Design and configure authentication and authorization using SAP Cloud Identity Services (IAS/IPS), including SSO and federation with corporate IdPs such as Azure AD/Entra ID and Okta.
- Define role collections, roles, and scopes, and manage authorizations via XSUAA and the Authorization & Trust Management service.
- Automate user and role provisioning and lifecycle management.
- Support SAP Cloud Identity Access Governance (IAG) for access reviews, SoD analysis, and privileged access.
Platform security and governance
- Define security standards for global accounts, directories, subaccounts, and spaces.
- Manage Cloud Foundry and Kyma security, including org/space roles, service keys, and secrets handling.
- Configure and manage Cloud Connector, destinations, and secure connectivity to on-premise and third-party systems.
- Apply secure network patterns such as private link, IP allow-listing, and mTLS.
Application and integration security
- Review and secure CAP, SAPUI5/Fiori, and Node.js/Java extensions (OAuth 2.0, JWT, CSRF, CORS, input validation).
- Secure SAP Integration Suite (API Management, Cloud Integration) with credential stores, certificates, and API policies.
- Partner with DevOps to embed security in CI/CD pipelines (SAST/DAST, dependency scanning, secrets management).
Data protection and compliance
- Implement encryption at rest and in transit, key management, and data masking where required.
- Support compliance with ISO 27001, SOC 1/2, GDPR, and internal policies, and provide evidence for audits.
- Review BTP audit logs and integrate them with SIEM tools (e.g., Splunk, Sentinel) via the Audit Log service.
Monitoring and incident response
- Define security monitoring, alerting, and incident response procedures for BTP.
- Run periodic security assessments and remediate findings.
- Track SAP Security Notes and BTP service updates and assess their impact.
Collaboration and documentation
- Produce security architecture documents, runbooks, and role design guides.
- Advise project teams on secure design and conduct security design reviews.
- Mentor developers and administrators on BTP security best practices.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
- Hands-on experience with SAP BTP security (XSUAA, IAS/IPS, role collections, trust configuration).
- Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and PKI/certificates.
- Experience with Cloud Connector, destinations, and hybrid connectivity.
- Working knowledge of Cloud Foundry and/or Kyma, and of SAP Integration Suite security.
- Familiarity with SAP S/4HANA and SAP security concepts (roles, authorizations, GRC/IAG).
- Understanding of cloud security principles (least privilege, zero trust, defense in depth).
- Good communication skills and the ability to work with technical and non-technical stakeholders.
Preferred Qualifications
- SAP certifications (e.g., SAP Certified Associate – Backend Developer for SAP BTP, or SAP Certified Technology Associate – SAP BTP).
- Security certifications such as CISSP, CISM, CCSP, or Azure/AWS security certifications.
- Experience with SAP Cloud ALM, SAP Build, SAP Event Mesh, or SAP HANA Cloud security.
- Scripting and automation skills (Terraform, BTP CLI, Python, or Bash) and infrastructure-as-code for BTP.
- Exposure to SIEM integration, threat modeling, and penetration testing coordination.
- Experience in regulated industries (finance, pharma, public sector).
Key Competencies
- Analytical, with a risk-based approach to security decisions
- Strong ownership and attention to detail
- Ability to translate security requirements into practical technical controls
- Comfortable working in agile, multi-vendor environments
Thanks & Regards,
Vandana Shrivastava
US IT Recruiter
O: 609-632-0621 ext.130
E:vandana.shrivastava@QuantumIntegrators.com
www.QuantumIntegrators.com