Skip to main content
Kimble Group
LOG INREGISTER

SAP BTP Security Resource (Raritan)

quantum integratorsSomerville, NJSenior L5
Computer Systems Engineers/ArchitectsInformation Security EngineersInformation Security Analysts
Computer Systems Design ServicesCustom Computer Programming ServicesSoftware Publishers
APPLY NOW (opens in a new tab)
Role: SAP BTP Security Resource
Location: Raritan, NJ 3 days a week
Helps define the identity, access, network, and data protection architecture for BTP subaccounts, extensions, and integrations. Work closely with cloud architects, developers, Basis/platform teams, and compliance stakeholders
Key Responsibilities:
  • Identity and access management
  • Design and configure authentication and authorization using SAP Cloud Identity Services (IAS/IPS), including SSO and federation with corporate IdPs such as Azure AD/Entra ID and Okta.
  • Define role collections, roles, and scopes, and manage authorizations via XSUAA and the Authorization & Trust Management service.
  • Automate user and role provisioning and lifecycle management.
  • Support SAP Cloud Identity Access Governance (IAG) for access reviews, SoD analysis, and privileged access.
  • Platform security and governance
  • Define security standards for global accounts, directories, subaccounts, and spaces.
  • Manage Cloud Foundry and Kyma security, including org/space roles, service keys, and secrets handling.
  • Configure and manage Cloud Connector, destinations, and secure connectivity to on-premise and third-party systems.
  • Apply secure network patterns such as private link, IP allow-listing, and mTLS.Application and integration security
  • Review and secure CAP, SAPUI5/Fiori, and Node.js/Java extensions (OAuth 2.0, JWT, CSRF, CORS, input validation).Secure SAP Integration Suite (API Management, Cloud Integration) with credential stores, certificates, and API policies.
  • Partner with DevOps to embed security in CI/CD pipelines (SAST/DAST, dependency scanning, secrets management).Data protection and compliance
  • Implement encryption at rest and in transit, key management, and data masking where required.
  • Support compliance with ISO 27001, SOC 1/2, GDPR, and internal policies, and provide evidence for audits.
  • Review BTP audit logs and integrate them with SIEM tools (e.g., Splunk, Sentinel) via the Audit Log service.
  • Monitoring and incident response
  • Define security monitoring, alerting, and incident response procedures for BTP.Run periodic security assessments and remediate findings.
  • Track SAP Security Notes and BTP service updates and assess their impact.
  • Collaboration and documentation
  • Produce security architecture documents, runbooks, and role design guides.
  • Advise project teams on secure design and conduct security design reviews.
  • Mentor developers and administrators on BTP security best practices.
Required Qualifications: Bachelor's degree in Computer Science, Information Security, or equivalent experience. Hands-on experience with SAP BTP security (XSUAA, IAS/IPS, role collections, trust configuration).Strong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and PKI/certificates. Experience with Cloud Connector, destinations, and hybrid connectivity. Working knowledge of Cloud Foundry and/or Kyma, and of SAP Integration Suite security. Familiarity with SAP S/4HANA and SAP security concepts (roles, authorizations, GRC/IAG).Understanding of cloud security principles (least privilege, zero trust, defense in depth).Good communication skills and the ability to work with technical and non-technical stakeholders.
Preferred Qualifications: SAP certifications (e.g., SAP Certified Associate – Backend Developer for SAP BTP, or SAP Certified Technology Associate – SAP BTP).Security certifications such as CISSP, CISM, CCSP, or Azure/AWS security certifications. Experience with SAP Cloud ALM, SAP Build, SAP Event Mesh, or SAP HANA Cloud security. Scripting and automation skills (Terraform, BTP CLI, Python, or Bash) and infrastructure-as-code for BTP.Exposure to SIEM integration, threat modeling, and penetration testing coordination. Experience in regulated industries (finance, pharma, public sector).
Key Competencies:
  • Analytical, with a risk-based approach to security decisions
  • Strong ownership and attention to detail
  • Ability to translate security requirements into practical technical controls
  • Comfortable working in agile, multi-vendor environments
  • Thanks & Regards, Vandana ShrivastavaUS IT RecruiterO: 609-632-0621 ext.130E: vandana.shrivastava@QuantumIntegrators.comwww.QuantumIntegrators.com

Matching similar jobs

Level

Senior L5

Location

Somerville, NJ

Occupation

Computer Systems Engineers/Architects

Industry

Computer Systems Design Services

Posted

today

APPLY NOW (opens in a new tab)