Sr Administrator (Support & Operations)

Job Summary

Role summary Execute security and identity impact assessments across all relevant landscapes and support remediation, testing, deployment preparation, cutover, and post-migration stabilisation.

Key Responsibilities

Key responsibilities

• Assess impacts to user identities, email attributes, authentication flows, SSO, role assignments, workflows, interfaces, and security integrations.
• Perform user and technical-account reviews and identify remediation actions for affected identities and access dependencies.
• Validate authentication and SSO scenarios, including dependencies involving identity providers, SAP, and integrated applications.
• Perform SailPoint-related checks for identity correlation, provisioning, access requests, workflows, connectors, and downstream impacts where applicable.
• Define and execute security test cases; document results, defects, risks, remediation, and approvals.
• Support deployment readiness, production cutover, validation, troubleshooting, and hypercare.
• Maintain auditable evidence and ensure remediation follows access governance and change-control requirements. Mandatory skills and experience
• Strong experience with SAP Security, user administration, authentication, SSO, and identity lifecycle processes.
• Working knowledge of SailPoint or equivalent IGA platform, including provisioning and access-governance dependencies.
• Ability to analyse impacts across SAP landscapes and integrated applications and translate them into remediation and test actions.
• Strong testing, defect management, documentation, and audit-evidence skills.
• Ability to work with business, application, Basis, infrastructure, IAM, and supplier teams.

Skill Requirements

Preferred skills

• Experience with Entra ID/Azure AD, Active Directory, Okta, SAP Cloud Identity Services, SAML, OAuth/OIDC, Kerberos, SNC, or certificate-based authentication.
• SAP Security, SailPoint, Microsoft Identity, CISSP, CISM, or equivalent certification.
• Experience with email-domain or corporate-identity migration. Expected deliverables
• Security and identity impact assessment. Email Domain Change Programme - Resource RFP Requirements | Confidential ASTEMO | PROCUREMENT REQUIREMENT
• Affected-user, account, interface, workflow, and integration inventory.
• Remediation tracker with accountable owners and target dates.
• Authentication, SSO, provisioning, and access test scenarios with evidence.
• Cutover validation checklist and issue-resolution support.
• Security handover and residual-risk documentation.

Other Requirements

Vendor proposal response requirements

• Candidate name, current location, proposed work location, and earliest availability.
• CV with project history that explicitly demonstrates the mandatory experience.
• Skills matrix mapped against each mandatory and preferred requirement.
• English and Japanese language capability.
• Relevant certifications.
• Proposed commercial rate and any assumptions.
• Confirmation that the supplier can maintain the required delivery capability throughout the planned approximately four-month engagement and support any approved extension.
• At least two professional references or equivalent supplier assurance, where permitted by the supplier process.