Principal SAP IAM / GRC Consultant / Identity & Access Management

Project overview

For a client in Bonn, we are currently looking for a

Principal SAP IAM / GRC Consultant / Identity & Access Management --- Bonn/remote

Responsibilities

• Creation and ongoing development of implementation, authorization, developer, release, test, and operational and usage concepts for SAP IdM and SAP GRC Access Control
• Analysis of the existing authorization landscape as well as migration and integration of in-house developments and existing role and user management systems into SAP IdM and SAP GRC AC
• Technical solution design and customizing of SAP IdM and SAP GRC AC (ARA, EAM, MSMP, BRF+) including ABAP development and web services
• Implementation of Fiori applications for Identity Management with connection to HCM, BW, and Access Control
• Development of role and authorization concepts (PFCG roles, structural authorizations, and analysis authorizations), authorization risk analyses, and recertification
• Planning and execution of system tests in SAP Solution Manager, including creation of test plans, test cases, and test data
• Operation and support (2nd and 3rd level) for roles, authorizations, and SAP GRC AC according to ITIL (Incident, Problem, and Change Management), including maintenance of the risk rule set
• Conception and setup of a cloud identity management solution (SAP Cloud IAG, IAG Bridge, IAS/IPS, SAP BTP) as well as analysis of AI usage in the identity environment
• Process modeling in ARIS, creation of documentation and contributions for regular meetings, as well as knowledge transfer
• Participation in on-call duty (weekdays 5:00 PM to 7:00 AM, full days on weekends and holidays)

Requirements

-Certificates: at least one additional certificate besides ITIL Foundation must be proven: ITIL Expert, TOGAF 8, SAP TERP 10, SAP Fiori Application Developer, SAP Security Architect or SAP Authorizations Certification, GRC300 SAP Access Control Implementation and Configuration, Scrum, PRINCE2, IPMA or PMI, as well as certification in Test Management

Reference: 26-1468

• MUST: Minimum 10 years of professional experience
• MUST: ITIL Foundation (V3 or higher)
• MUST: German at least C1, English at least B1
• MUST: Experience in at least one of the following focus areas (ideally in several):
• Focus: SAP GRC 12.x (Access Control, ARA), SAP NetWeaver, S/4HANA Authorizations, SAP BW or SAP HR Organizational Management (minimum 5 years)
• Focus: Creation and implementation of authorization concepts in the SAP environment with PFCG roles, Fiori roles and catalogs, BW analysis roles, and HCM structural authorizations (minimum 5 years)
• Focus: Implementation of SAP IdM solutions (Forms, Scripts, Workflows, Connectors, REST/API) (minimum 5 years)
• Focus: Conception and implementation of identity solutions and rule sets with SAP AC and SAP GRC ARA (BRF+, EAM, Workflows, Approval Structures) (minimum 3 to 5 years)
• Focus: ABAP programming (minimum 5 years)
• Focus: Analysis and documentation of concepts, business blueprints, as well as governance, operational, business authorization, and developer documents, creation of solution concepts (minimum 3 to 5 years)
• Focus: Test management, quality assurance, and creation and execution of test scenarios in the area of SAP AC (minimum 5 years)
• Focus: Cutover planning and migration of SAP IAM in-house developments and central user administration into SAP GRC AC (minimum 3 years)
• Focus: SAP system landscapes with at least a 3-system environment (minimum 4 years)
• Focus: Cloud Identity Integration: SAP CIS, IAG Bridge, IAS/IPS, Cloud Connector, SCIM Mapping, GRC AC for disconnected SAP systems, SAP solutions in critical infrastructures (minimum 2 years)
• Advantageous: Experience with AI/LLM-based solutions for the analysis of SAP GRC AC access requests and reporting

Project details

Remote (approx. 80%), Bonn (approx. 20%)

Utilization: Full-time

Upon assignment

Until 12/31/2028 + option

Contract Type: Freelance

Could this position be of interest to you? Then please send me your current CV by email to *@*.com

I am of course also available at any time for questions or background information.

Thank you and best regards

Anne-Katrin Loth

Senior Recruitment Consultant | Team Lead

SECUSTAFF GmbH

Phone *

*@*.com

SECUSTAFF

Secure Staffing.

• Start: 2027-01
• Duration: 24 Monate
• Remote: hybrid
• Location: Bonn, Deutschland, DE
• Languages: German