SAP IAG Architect

IAG JD
Job Title: Senior SAP IAG Architect
Job Overview We are seeking a highly skilled Senior SAP Identity Access Governance (IAG)
specialist to design, implement, and lead access governance across our hybrid SAP
ecosystem. In this role, the IAG Architect will act as the Subject Matter Expert (SME) for
OnPremise and cloud access provisioning, Segregation of Duties (SoD) enforcement and risk
management, FireFighter, Access Certification and Role Design setup. IAG Architect needs
to bridge the legacy environments with modern SAP Business Technology Platform (BTP)
cloud architecture to drive audit readiness and robust enterprise compliance.
SAP Cloud IAG Configuration & Management
Deploy and manage SAP Cloud IAG services including Access Request, Access Analysis,
Role Design, Access Certification, and Privileged Access Management (PAM).Configure
multi-level, risk-based access approval workflows tailored to complex corporate matrixes.
Identity & Provisioning Integration
Direct and optimize identity flows utilizing SAP Identity Authentication Services (IAS) and
SAP Identity Provisioning Services (IPS).Maintain and adjust IPS source, target, and proxy
system transformations using JSON to filter and synchronize data accurately. Design security
architectures integrating SAP IAG with third-party IAM solutions like SailPoint, Okta, or
Azure AD
Risk Analysis & Segregation of Duties (SoD)
Build, customize, and optimize SoD rulesets for S4HANA and cloud applications like SAP
SuccessFactors, Ariba, Concur etc. Conduct root-cause investigations on complex access
violations and false positives. Coordinate directly with Business Process Owners (BPOs) to
get mitigating controls
Leadership & Governance
Drive User Access Reviews (UAR) and periodic Access Certification campaigns. Support
client for external and internal audit readiness. Mentor junior security team members and
direct managed service partners to ensure strict SLA compliance.