Job Summary
Job Title: SAP BTP Security Consultant (Cloud Foundry)
Location: Offshore
Experience: 5–8 years
Band- E1.2
Employment Type: Full-time
Qualification : Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.
Job Summary
We are seeking an experienced SAP BTP Security Consultant with strong expertise in Cloud Foundry security, Identity and Access Management (IAM), SAP BTP platform security, and integration security. The consultant will be responsible for designing, implementing, and governing security controls across SAP BTP landscapes while ensuring compliance with enterprise security standards and cloud security best practices.
Key Responsibilities
- Design and implement security architecture for SAP BTP Cloud Foundry environments.
- Configure and manage authentication and authorization mechanisms across BTP services.
- Administer users, roles, role collections, and trust configurations.
- Implement Single Sign-On (SSO) solutions using SAP Identity Authentication Service (IAS).
- Configure Identity Provisioning Service (IPS) for user lifecycle management.
- Secure SAP Build Work Zone, SAP Fiori applications, CAP applications, and Integration Suite services.
- Manage OAuth 2.0, SAML 2.0, OpenID Connect, and JWT-based authentication.
- Conduct security assessments, vulnerability reviews, and access audits.
- Support compliance initiatives related to GDPR, SOX, ISO 27001, and internal security policies.
- Implement secure communication between SAP BTP and on-premise systems using SAP Cloud Connector.
- Collaborate with enterprise architects, infrastructure teams, and application teams on cloud security governance.
Required Technical Skills
SAP BTP Security
- SAP BTP Cloud Foundry
- SAP Authorization Concepts
- Role Collections
- XSUAA (Authorization & Trust Management)
- Trust Configuration
- Entitlements & Quotas
- Global Account and Subaccount Administration
Identity & Access Management
- SAP Identity Authentication Service (IAS)
- SAP Identity Provisioning Service (IPS)
- Azure Active Directory / Microsoft Entra ID
- Active Directory Integration
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- Multi-Factor Authentication (MFA)
Security Services
- SAP Cloud Connector
- Destination Service Security
- Connectivity Service Security
- Credential Management
- Certificate Management
- Principal Propagation
Application Security
- SAP Fiori Security
- SAPUI5 Security
- SAP Build Work Zone Security
- CAP Application Security
- API Security
- Integration Suite Security
Cloud Foundry Administration Responsibilities
- Configure and manage Cloud Foundry Organizations and Spaces.
- Define platform-level access controls.
- Implement segregation of duties and least-privilege access principles.
- Monitor security logs and audit trails.
- Support production deployments from a security and governance perspective.
Review service bindings, secrets, environment variables, and connectivity settings.
Key Responsibilities
Job Title: SAP BTP Security Consultant (Cloud Foundry)
Location: Offshore
Experience: 5–8 years
Band- E1.2
Employment Type: Full-time
Qualification : Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.
Job Summary
We are seeking an experienced SAP BTP Security Consultant with strong expertise in Cloud Foundry security, Identity and Access Management (IAM), SAP BTP platform security, and integration security. The consultant will be responsible for designing, implementing, and governing security controls across SAP BTP landscapes while ensuring compliance with enterprise security standards and cloud security best practices.
Key Responsibilities
- Design and implement security architecture for SAP BTP Cloud Foundry environments.
- Configure and manage authentication and authorization mechanisms across BTP services.
- Administer users, roles, role collections, and trust configurations.
- Implement Single Sign-On (SSO) solutions using SAP Identity Authentication Service (IAS).
- Configure Identity Provisioning Service (IPS) for user lifecycle management.
- Secure SAP Build Work Zone, SAP Fiori applications, CAP applications, and Integration Suite services.
- Manage OAuth 2.0, SAML 2.0, OpenID Connect, and JWT-based authentication.
- Conduct security assessments, vulnerability reviews, and access audits.
- Support compliance initiatives related to GDPR, SOX, ISO 27001, and internal security policies.
- Implement secure communication between SAP BTP and on-premise systems using SAP Cloud Connector.
- Collaborate with enterprise architects, infrastructure teams, and application teams on cloud security governance.
Required Technical Skills
SAP BTP Security
- SAP BTP Cloud Foundry
- SAP Authorization Concepts
- Role Collections
- XSUAA (Authorization & Trust Management)
- Trust Configuration
- Entitlements & Quotas
- Global Account and Subaccount Administration
Identity & Access Management
- SAP Identity Authentication Service (IAS)
- SAP Identity Provisioning Service (IPS)
- Azure Active Directory / Microsoft Entra ID
- Active Directory Integration
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- Multi-Factor Authentication (MFA)
Security Services
- SAP Cloud Connector
- Destination Service Security
- Connectivity Service Security
- Credential Management
- Certificate Management
- Principal Propagation
Application Security
- SAP Fiori Security
- SAPUI5 Security
- SAP Build Work Zone Security
- CAP Application Security
- API Security
- Integration Suite Security
Cloud Foundry Administration Responsibilities
- Configure and manage Cloud Foundry Organizations and Spaces.
- Define platform-level access controls.
- Implement segregation of duties and least-privilege access principles.
- Monitor security logs and audit trails.
- Support production deployments from a security and governance perspective.
Review service bindings, secrets, environment variables, and connectivity settings.