Job Description:

Are you an experienced SAP Identity & Access Management professional looking to play a key role in enterprise SAP security and governance programmes? We are seeking an experienced SAP IAG IAM Consultant to design, implement, and support SAP Identity Access Governance (IAG) solutions across complex SAP landscapes.

Key Responsibilities

• Implement and configure SAP Identity Access Governance (IAG) modules, including:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Role Design & Provisioning (RDP)
• Deliver SAP IAG solutions across SAP S/4HANA, SAP ECC, and SAP Cloud environments.
• Perform Segregation of Duties (SoD) analysis to identify, assess, and mitigate access risks.
• Develop and maintain risk rulesets, mitigation controls, and compliance policies.
• Design, build, and maintain business and technical roles, role hierarchies, and authorisation concepts.
• Manage user lifecycle processes including provisioning, de-provisioning, access requests, and approval workflows.
• Integrate SAP IAG with SAP Identity Authentication Service (IAS), SAP Identity Provisioning Service (IPS), SAP GRC, and third-party identity platforms where required.
• Configure identity federation, cloud connectors, and API-based integrations with non-SAP applications.
• Configure and optimise access request workflows, including multi-stage approvals, risk-based approvals, business rules, and automated notifications.
• Support solution testing, user acceptance testing (UAT), deployment activities, and post-go-live support.
• Work closely with security, compliance, audit, and business stakeholders to ensure secure and compliant access governance.

Required Skills & Experience

• Proven experience implementing and supporting SAP Identity Access Governance (IAG).
• Strong knowledge of SAP security and authorisation concepts across SAP S/4HANA and SAP ECC.
• Hands-on experience with:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Role Design & Provisioning (RDP)
• Experience performing Segregation of Duties (SoD) analysis and implementing mitigation controls.
• Strong understanding of SAP IAS and SAP IPS.
• Experience integrating SAP IAG with SAP GRC and third-party identity management solutions.
• Knowledge of identity governance, access management, compliance, and audit requirements.
• Experience configuring approval workflows, business rules, and user provisioning processes.
• Excellent stakeholder management and communication skills.

Desirable

• Experience working within large-scale SAP transformation or migration programmes.
• Knowledge of hybrid SAP landscapes and cloud identity services.
• Familiarity with identity governance platforms such as SailPoint or Microsoft Entra ID.
• SAP Security or SAP IAG certifications would be advantageous.