SAP IAM / GRC Consultant

Project overview

For a client in Bonn, we are currently looking for a Principal SAP IAM / GRC Consultant / Identity & Access Management — Bonn/remote

Responsibilities

– Creation and maintenance of implementation, authorization, developer, release, test, and operational and usage concepts for SAP IdM and SAP GRC Access Control

– Analysis of the existing authorization landscape as well as migration and integration of custom developments and existing role and user management systems into SAP IdM and SAP GRC AC

– Technical solution design and customizing of SAP IdM and SAP GRC AC (ARA, EAM, MSMP, BRF+) including ABAP development and web services

– Implementation of Fiori applications for Identity Management with connection to HCM, BW, and Access Control

– Development of role and authorization concepts (PFCG roles, structural authorizations, and analysis authorizations), authorization risk analyses, and recertification

– Planning and execution of system tests in SAP Solution Manager, including creation of test plans, test cases, and test data

– Operation and support (2nd and 3rd level) for roles, authorizations, and SAP GRC AC according to ITIL (Incident, Problem, and Change Management), including maintenance of the risk rule set

– Conception and setup of a cloud identity management solution (SAP Cloud IAG, IAG Bridge, IAS/IPS, SAP BTP) as well as analysis of AI usage in the identity environment

– Process modeling in ARIS, creation of documentation and contributions for regular meetings, as well as knowledge transfer

– Participation in on-call duty (weekdays 5:00 PM to 7:00 AM, weekends and public holidays full day)

Requirements

– MUST: Minimum 10 years of professional experience

– MUST: ITIL Foundation (V3 or higher)

– MUST: German at least C1, English at least B1

– MUST: Experience in at least one of the following focus areas (ideally in several):

– Focus: SAP GRC 12.x (Access Control, ARA), SAP NetWeaver, S/4HANA Authorizations, SAP BW or SAP HR Organizational Management (minimum 5 years)

– Focus: Creation and implementation of authorization concepts in the SAP environment with PFCG roles, Fiori roles and catalogs, BW analysis roles, and HCM structural authorizations (minimum 5 years)

– Focus: Implementation of SAP IdM solutions (Forms, Scripts, Workflows, Connectors, REST/API) (minimum 5 years)

– Focus: Conception and implementation of identity solutions and rule sets with SAP AC and SAP GRC ARA (BRF+, EAM, Workflows, Approval Structures) (minimum 3 to 5 years)

– Focus: ABAP programming (minimum 5 years)

– Focus: Analysis and documentation of concepts, Business Blueprints, as well as governance, operational, business authorization, and developer documents, creation of solution concepts (minimum 3 to 5 years)

– Focus: Test management, quality assurance, and creation and execution of test scenarios in the area of SAP AC (minimum 5 years)

– Focus: Cutover planning and migration of SAP IAM custom developments and central user administration into SAP GRC AC (minimum 3 years)

– Focus: SAP system landscapes with at least a 3-system landscape (minimum 4 years)

– Focus: Cloud Identity Integration: SAP CIS, IAG Bridge, IAS/IPS, Cloud Connector, SCIM Mapping, GRC AC for disconnected SAP systems, SAP solutions in critical infrastructures (minimum 2 years)

– Certificates: At least one additional certificate to ITIL Foundation must be proven: ITIL Expert, TOGAF 8, SAP TERP 10, SAP Fiori Application Developer, SAP Security Architect or SAP Authorization Certification, GRC300 SAP Access Control Implementation and Configuration, Scrum, PRINCE2, IPMA or PMI, as well as certification in test management

– Advantageous: Experience with AI/LLM-based solutions for the analysis of SAP GRC AC access requests and reporting

Reference: 26-1468

Project details

Remote (approx. 80%), Bonn (approx. 20%)

Utilization: Full-time

Upon assignment

Until 12/31/2028 + Option

Contract Type: Freelance

Could this position be of interest to you? Then please send me your current CV by email to [contact removed]

I am of course also available at any time for questions or background information. Thank you and best regards

Anne-Katrin Loth Senior Recruitment Consultant | Team Lead SECUSTAFF GmbH Phone [contact removed] [contact removed]

SECUSTAFF Secure Staffing.

• Start: Nach Beauftragung
• Duration: Bis 31.12.2028 + Option
• Remote: remote
• Location: Bonn, Germany, DE
• Languages: German