Job Summary

Role summary Execute security and identity impact assessments across all relevant landscapes and support remediation, testing, deployment preparation, cutover, and post-migration stabilisation.

Key Responsibilities

Key responsibilities • Assess impacts to user identities, email attributes, authentication flows, SSO, role assignments, workflows, interfaces, and security integrations. • Perform user and technical-account reviews and identify remediation actions for affected identities and access dependencies. • Validate authentication and SSO scenarios, including dependencies involving identity providers, SAP, and integrated applications. • Perform SailPoint-related checks for identity correlation, provisioning, access requests, workflows, connectors, and downstream impacts where applicable. • Define and execute security test cases; document results, defects, risks, remediation, and approvals. • Support deployment readiness, production cutover, validation, troubleshooting, and hypercare. • Maintain auditable evidence and ensure remediation follows access governance and change-control requirements. Mandatory skills and experience • Strong experience with SAP Security, user administration, authentication, SSO, and identity lifecycle processes. • Working knowledge of SailPoint or equivalent IGA platform, including provisioning and access-governance dependencies. • Ability to analyse impacts across SAP landscapes and integrated applications and translate them into remediation and test actions. • Strong testing, defect management, documentation, and audit-evidence skills. • Ability to work with business, application, Basis, infrastructure, IAM, and supplier teams.

Skill Requirements

Preferred skills • Experience with Entra ID/Azure AD, Active Directory, Okta, SAP Cloud Identity Services, SAML, OAuth/OIDC, Kerberos, SNC, or certificate-based authentication. • SAP Security, SailPoint, Microsoft Identity, CISSP, CISM, or equivalent certification. • Experience with email-domain or corporate-identity migration. Expected deliverables • Security and identity impact assessment. Email Domain Change Programme - Resource RFP Requirements | Confidential ASTEMO | PROCUREMENT REQUIREMENT • Affected-user, account, interface, workflow, and integration inventory. • Remediation tracker with accountable owners and target dates. • Authentication, SSO, provisioning, and access test scenarios with evidence. • Cutover validation checklist and issue-resolution support. • Security handover and residual-risk documentation.

Other Requirements

 Vendor proposal response requirements • Candidate name, current location, proposed work location, and earliest availability. • CV with project history that explicitly demonstrates the mandatory experience. • Skills matrix mapped against each mandatory and preferred requirement. • English and Japanese language capability. • Relevant certifications. • Proposed commercial rate and any assumptions. • Confirmation that the supplier can maintain the required delivery capability throughout the planned approximately four-month engagement and support any approved extension. • At least two professional references or equivalent supplier assurance, where permitted by the supplier process.