SAP IAM Architect

• We implement and configure SAP IAM modules, including ARA, ARM, EAM, and RDP.
• We support deployment across SAP S/4HANA, ECC, and cloud applications.
• We perform Segregation of Duties (SoD) risk analysis.
• We identify and mitigate critical access risks and compliance violations.
• We define and maintain risk rulesets and mitigation controls.
• We design and maintain business roles, technical roles, role hierarchies, and authorizations.
• We manage user provisioning and de-provisioning, access requests, and approval workflows.
• We integrate SAP IAM with SAP IAS, SAP IPS, SAP GRC systems in hybrid landscapes, and non-SAP systems via connectors and APIs.
• We configure cloud connectors and identity federation.
• We configure access request workflows, including multi-level approval processes and risk-based approvals.
• We customize business rules and notification mechanisms.
• We perform unit testing, integration testing, and UAT support.
• We manage transport of configurations and production deployments.
• We maintain functional and technical documentation and access governance policies.
• We define standards for role naming conventions and access control practices.

Technologies:

• ABAP
• ARM
• Architect
• Cloud
• EAM
• IAM
• Support
• Network
• RBAC
• SAP S/4HANA
• SAP
• SAP Fiori
• Security

• We require strong hands-on experience with SAP IAM modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Role Design Provisioning (RDP).
• We require a deep understanding of SAP authorization concepts, including roles, profiles, objects, user administration, and access control.
• We require experience with SAP S/4HANA and ECC security.
• We require Segregation of Duties (SoD) risk management experience, including rule set configuration and maintenance, risk identification and mitigation strategies, and compliance frameworks such as SOX and audit controls.
• We require identity and access management concepts, including user lifecycle management and role-based access control (RBAC).
• We require hands-on experience with SAP IAS (Identity Authentication Service) and SAP IPS (Identity Provisioning Service).
• We require experience integrating SAP IAM with SAP applications and cloud systems.
• We require experience configuring access request workflows, including multi-stage approval workflows, risk-based access request processes, and access provisioning workflows.
• We require strong problem-solving and analytical skills.
• We require effective communication with business and technology stakeholders.
• We require Agile/Scrum experience.
• Desirable: experience with advanced SAP landscapes, including hybrid landscapes and multi-system environments.
• Desirable: basic knowledge of technical development, such as ABAP, SAP Fiori/UI5, APIs, and automation.
• Desirable: experience integrating IAM with third-party IAM tools such as SailPoint and with cloud applications.
• Desirable: knowledge of compliance and governance frameworks, including SOX, GDPR, and ISO27001, and experience in audit handling.
• Desirable: SAP Security, SAP IAM, or SAP GRC certifications, or related certifications such as CISA or CISSP.

We are TCS, a purpose-led transformation company built on belief, supporting some of the biggest brands in the UK and worldwide as they transform through technology and make a meaningful difference to the people and communities they serve. This is a permanent SAP IAM Architect role in the United Kingdom, working 40 hours per week full time. We offer competitive salary packages and benefits including pension, health care, life assurance, laptop, phone, access to extensive training resources, and discounts within the wider Tata network. We also offer health and wellness initiatives, sports events, and we are a proud sponsor of the London Marathon. We are committed to diversity, inclusion, and wellbeing, and we welcome applications from people of all backgrounds, including disabled people and those with long-term conditions who meet the minimum criteria.