The SAP Identity and Access Management Engineer will be responsible for the compliant design implementation and administration of our SAP Ecosystem. Creating and maintaining roles within both SAP On-premise systems and SAP Cloud environments, administering users in both SAP and non-SAP Systems. Designing and improving security and business processes to be compliant and efficient.
SAP Identity and Access Management Engineer Responsibilities:
- Support the existing SAP on premise systems including ECC, HCM, SCM, BW and CRM, the existing SAP Cloud systems including Identity Access Governance, Identity Services (IAS and IPS), Concur, Ariba, Commerce Cloud, C4C and BTP and the non-SAP systems that are part of the Employee Identity lifecycle such as Microsoft Active Directory and Azure Entra ID.
- Design and implement secure SAP authorization roles based on the principle of least privilege.
- Maintain role documentation to ensure users, approvers and reviewers understand the access available.
- Investigate and resolve user access issues related to authorizations and permissions.
- Maintain clear documentation of user access issues and resolutions within our ticketing tools.
- Configure and manage SAP's integration with SSO solutions (Azure, SAP Secure Login Service, SAP Identity Authentication Service).
- Collaborate with Infrastructure teams and application owners to ensure seamless and secure SSO experience.
- Other duties as assigned.
SAP Identity and Access Management Engineer Requirements:
- Bachelor's degree in Information Technology, Business Administration, Information Systems or a related field.
- Ability to communicate and articulate effectively, both orally and in writing, to present complex concepts and ideas to IT development teams and business counterparts.
- Ability to manage multiple conflicting priorities in a professional manner, good planning and organizing skills
- Deep knowledge of SAP Security and Role Design principles including Master-Derived roles, Composite roles, Business Role Concept, authorization objects and system traces.
- Experience in supporting designing new roles based on business requirements or redesigning existing roles based on updated requirements.
- Experience in remediating segregation of duties conflicts via role design changes
- Demonstrated experience with large Enterprise ERP implementations in the areas of technical design specification, development, testing, deployment and support.
- Experience using Microsoft Office products, including Outlook, Excel, PowerPoint, Visio.
- Travel, domestic and international, up to 25%
- Speaking / Writing in Spanish and French are desirable.
- Hands on experience with SAP Identity Access Governance or Cloud Identity Services
- Knowledge of SAP Datawarehouse tools BW, DataSphere, SAP Analytic Cloud (SAC) is a plus.
- Familiarity with S4/HANA architecture, features, and migration strategies.
- Working knowledge of Single Sign on authentication methods such as SAML2.0 and OAuth
Nykey Richter
Project Manager
LaSalle Network
LaSalle Network is an Equal Opportunity Employer m/f/d/v.
LaSalle Network is the leading provider of direct hire and temporary staffing services. For over two decades, LaSalle has helped organizations hire faster and connect top talent with opportunities, from entry-level positions to the C-suite. With units specializing in Accounting and Finance, Administrative, Marketing, Technology, Supply chain, Healthcare Revenue Cycle, Call Center, Human Resources and Executive Search. LaSalle offers staffing and recruiting solutions to companies of all sizes and across all industries.
LaSalle Network is the premier staffing and recruiting firm, earning over 100 culture, revenue and industry-based awards from major publications and having its company experts regularly contribute insights on retention strategies, hiring trends and hiring challenges, and more to national news outlets. LaSalle Network offers temporary Field Employees benefit plans including medical, dental and vision coverage. Family Medical Leave, Worker's compensation, Paid Leave and Sick Leave are also provided. View a full list of our benefits here:
LNPW