Job Description:

SAP IAG IAM Consultant

£85,000-£100,000 + Excellent Benefits

Hybrid - London

Permanent

The Opportunity

Are you an experienced SAP Identity & Access Management professional with strong hands-on SAP IAG experience?

We're looking for a SAP IAG IAM Consultant to join a major enterprise transformation programme, playing a key role in designing and delivering secure, compliant and scalable identity governance solutions across a complex SAP landscape.

This is an excellent opportunity for someone who enjoys working at the intersection of SAP Security, Identity Governance and enterprise transformation, with the chance to work across modern SAP environments including S/4HANA, ECC and SAP Cloud.

You'll take ownership of SAP IAG solutions, from design and configuration through to testing, deployment and ongoing optimisation, while working closely with security, compliance, audit and business stakeholders.

What You'll Be Doing

As the SAP IAG IAM Consultant, you'll be responsible for:

• Designing, implementing and supporting SAP Identity Access Governance (IAG) solutions.
• Configuring and delivering IAG capabilities including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP).
• Delivering SAP IAG solutions across SAP S/4HANA, SAP ECC and SAP Cloud environments.
• Performing Segregation of Duties (SoD) analysis and identifying, assessing and mitigating access risks.
• Developing and maintaining risk rulesets, mitigation controls and compliance policies.
• Designing and maintaining business and technical roles, role hierarchies and SAP authorisation concepts.
• Managing user lifecycle processes including provisioning, de-provisioning, access requests and approval workflows.
• Configuring and optimising access request workflows, including multi-stage and risk-based approvals.
• Integrating SAP IAG with SAP IAS, SAP IPS, SAP GRC and third-party identity platforms.
• Supporting identity federation, cloud connectors and API-based integrations with non-SAP applications.
• Supporting solution testing, UAT, deployment and post-go-live activities.
• Working closely with security, compliance, audit and business teams to ensure access remains secure and compliant.

What We're Looking For

We're looking for someone with a strong background in SAP Security and Identity Access Management, who can combine technical expertise with excellent stakeholder management.

You'll ideally have:

• Proven hands-on experience implementing and supporting SAP Identity Access Governance (IAG).
• Strong SAP Security and authorisation knowledge across SAP S/4HANA and SAP ECC.
• Practical experience with ARA, ARM, EAM and RDP.
• Strong experience with Segregation of Duties (SoD) analysis and mitigation controls.
• Good knowledge of SAP IAS and SAP IPS.
• Experience integrating SAP IAG with SAP GRC and third-party identity management platforms.
• Experience configuring approval workflows, business rules and user provisioning processes.
• A strong understanding of identity governance, access management, compliance and audit requirements.
• Excellent communication and stakeholder management skills, with the ability to work effectively across technical and business teams.

Desirable Experience

It would be advantageous if you also have:

• Experience working on large-scale SAP transformation or migration programmes.
• Knowledge of hybrid SAP landscapes and cloud identity services.
• Exposure to SailPoint or Microsoft Entra ID.
• SAP Security or SAP IAG certifications.

Interested? Apply now!