Senior Developer

Job Summary

Job Title: SAP BTP Security Consultant (Cloud Foundry)

Location: Offshore
Experience: 5–8 years

Band- E1.2
Employment Type: Full-time

Qualification : Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.

Job Summary

We are seeking an experienced SAP BTP Security Consultant with strong expertise in Cloud Foundry security, Identity and Access Management (IAM), SAP BTP platform security, and integration security. The consultant will be responsible for designing, implementing, and governing security controls across SAP BTP landscapes while ensuring compliance with enterprise security standards and cloud security best practices.

Key Responsibilities

• Design and implement security architecture for SAP BTP Cloud Foundry environments.
• Configure and manage authentication and authorization mechanisms across BTP services.
• Administer users, roles, role collections, and trust configurations.
• Implement Single Sign-On (SSO) solutions using SAP Identity Authentication Service (IAS).
• Configure Identity Provisioning Service (IPS) for user lifecycle management.
• Secure SAP Build Work Zone, SAP Fiori applications, CAP applications, and Integration Suite services.
• Manage OAuth 2.0, SAML 2.0, OpenID Connect, and JWT-based authentication.
• Conduct security assessments, vulnerability reviews, and access audits.
• Support compliance initiatives related to GDPR, SOX, ISO 27001, and internal security policies.
• Implement secure communication between SAP BTP and on-premise systems using SAP Cloud Connector.
• Collaborate with enterprise architects, infrastructure teams, and application teams on cloud security governance.

Required Technical Skills

SAP BTP Security

• SAP BTP Cloud Foundry
• SAP Authorization Concepts
• Role Collections
• XSUAA (Authorization & Trust Management)
• Trust Configuration
• Entitlements & Quotas
• Global Account and Subaccount Administration

Identity & Access Management

• SAP Identity Authentication Service (IAS)
• SAP Identity Provisioning Service (IPS)
• Azure Active Directory / Microsoft Entra ID
• Active Directory Integration
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• Multi-Factor Authentication (MFA)

Security Services

• SAP Cloud Connector
• Destination Service Security
• Connectivity Service Security
• Credential Management
• Certificate Management
• Principal Propagation

Application Security

• SAP Fiori Security
• SAPUI5 Security
• SAP Build Work Zone Security
• CAP Application Security
• API Security
• Integration Suite Security

Cloud Foundry Administration Responsibilities

• Configure and manage Cloud Foundry Organizations and Spaces.
• Define platform-level access controls.
• Implement segregation of duties and least-privilege access principles.
• Monitor security logs and audit trails.
• Support production deployments from a security and governance perspective.

Review service bindings, secrets, environment variables, and connectivity settings.

Key Responsibilities

Job Title: SAP BTP Security Consultant (Cloud Foundry)

Location: Offshore
Experience: 5–8 years

Band- E1.2
Employment Type: Full-time

Qualification : Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.

Job Summary

We are seeking an experienced SAP BTP Security Consultant with strong expertise in Cloud Foundry security, Identity and Access Management (IAM), SAP BTP platform security, and integration security. The consultant will be responsible for designing, implementing, and governing security controls across SAP BTP landscapes while ensuring compliance with enterprise security standards and cloud security best practices.

Key Responsibilities

• Design and implement security architecture for SAP BTP Cloud Foundry environments.
• Configure and manage authentication and authorization mechanisms across BTP services.
• Administer users, roles, role collections, and trust configurations.
• Implement Single Sign-On (SSO) solutions using SAP Identity Authentication Service (IAS).
• Configure Identity Provisioning Service (IPS) for user lifecycle management.
• Secure SAP Build Work Zone, SAP Fiori applications, CAP applications, and Integration Suite services.
• Manage OAuth 2.0, SAML 2.0, OpenID Connect, and JWT-based authentication.
• Conduct security assessments, vulnerability reviews, and access audits.
• Support compliance initiatives related to GDPR, SOX, ISO 27001, and internal security policies.
• Implement secure communication between SAP BTP and on-premise systems using SAP Cloud Connector.
• Collaborate with enterprise architects, infrastructure teams, and application teams on cloud security governance.

Required Technical Skills

SAP BTP Security

• SAP BTP Cloud Foundry
• SAP Authorization Concepts
• Role Collections
• XSUAA (Authorization & Trust Management)
• Trust Configuration
• Entitlements & Quotas
• Global Account and Subaccount Administration

Identity & Access Management

• SAP Identity Authentication Service (IAS)
• SAP Identity Provisioning Service (IPS)
• Azure Active Directory / Microsoft Entra ID
• Active Directory Integration
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• Multi-Factor Authentication (MFA)

Security Services

• SAP Cloud Connector
• Destination Service Security
• Connectivity Service Security
• Credential Management
• Certificate Management
• Principal Propagation

Application Security

• SAP Fiori Security
• SAPUI5 Security
• SAP Build Work Zone Security
• CAP Application Security
• API Security
• Integration Suite Security

Cloud Foundry Administration Responsibilities

• Configure and manage Cloud Foundry Organizations and Spaces.
• Define platform-level access controls.
• Implement segregation of duties and least-privilege access principles.
• Monitor security logs and audit trails.
• Support production deployments from a security and governance perspective.

Review service bindings, secrets, environment variables, and connectivity settings.

Skill Requirements

Other Requirements