Cloud Security Engineer - SAP

Under general supervision, engineers implement and maintain effective methods to protect ADM's Cloud applications. Today, this includes applications like SAP BTP, CIS, SAC, SuccessFactors, and other SAAS and/or ADM controlled Cloud applications. Interface with the solution teams and business to provide recommendations of operational and technical solutions to enable the business and maintain the security posture at appropriate risk levels. Must display enthusiasm and interest in Information Security and draw recommendations based on real-world experience.

Responsibilities:

• Configure Application security roles.
• Responsible for creation and maintenance of the complete and accurate technical documentation of security services and solutions.
• Collaborate with cross-functional technical teams to deliver creative solutions to complex global technology challenges and business requirements.
• Secure inbound and outbound application data through designed and approved Integrations.
• Maintain and audit all integration security.
• ADMinister segregation of duties mitigation for application-related business functions and audit support.
• Maintain Privileged Access Management processes for SAAS applications.
• Operate technology controls for compliance and reporting with application owners.
• Support and Troubleshoot issues raised by the Identity Management Team related to application access.
• Collaboration with the cybersecurity team to ensure SIEM integration and Use Cases.
• Liaison with SOC for Security Incident Management Process Management.
• Maintain Single Sign-On Integrations for SAAS Applications.
• Support the Data Protection team and assist in ADMinistering data protection requirements to meet policy and security frameworks.
• Participates as a member of the SAP Security Team to incorporate new and existing technology securely into the landscape.
• Keeping informed of emerging solutions, security capabilities, and tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Interface within the broader Information Security function to help design and implement security improvements.
• Use established procedures to assist in the deployment and maintenance of ADM Application Role-based Security used around the globe.
• Anticipates problems and identifies long-term implications of decisions and actions.

Requirements:

• 4+ years' experience in building, deploying, and ADMinistering role-based security for ADM Cloud Applications and supporting systems.
• Experience in Application Security, including experience with security principles, role-based security approach, and identity management practices.
• Bachelor's degree or equivalent work experience.
• Hands-on experience designing, building, deploying, or ADMinistering complex application security including trust configuration, role creation, troubleshooting, system hardening, etc.
• SAP Security experience related to concepts of least privilege, risk management, vulnerability management, identity and access management, access controls, and segmentation.
• Functional understanding of complex enterprise environments and current technology areas like cloud and mobility.
• Experienced in ADMinistering Security within SAP BTP, Integration Suite, Business Application Studio, SAC or Datasphere and various SAP cloud applications.
• Hands-on experience in configuring authentication and managing SAP Cloud Identity Services like IAS, IPS and IAG.
• Ability to communicate and collaborate effectively with other team members in a geographic and culturally diverse workforce.
• Excellent analytical and troubleshooting skills.
• Ability to understand security risks versus business benefits and form a strong recommendation to cross-functional teams.
• Expected to complete projects within specified deadlines.
• Expected to work occasional nights, weekends, holidays, and overtime.
• Expected to perform on-call duties.
• Occasional Travel may be required.
• Strong sense of professionalism and ethics.

Desired Skills:

• Current holder of CISSP, or other industry certifications is a plus.
• SAP Application Security experience in SAP S4HANA, FIORI, GRC, SolMan, Signavio, SuccessFactors, and RISE.
• Process Control design and ADMinistrative experience.
• Audit response or related activities.
• Microsoft Active Directory and/or Entra ID experience.
• Security project management experience.

Skills

BTP, CISSP, IAG, IAM, IAS, IPS, SAP, SAP BTP, access controls, identity management, least privilege, security