> Markdown version of [/jobs/ext/2688557-sap-iam-architect](https://www.wearedevelopers.com/jobs/ext/2688557-sap-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SAP IAM Architect - **Company:** Tata Consultancy Services Ltd - **Location:** London, UK - **Salary:** £45,000.0 - £75,000.0 - **Contract:** Permanent contract - **Skills:** Open I5, Microsoft Access, Advanced Business Application Programming (ABAP), Application Programming Interfaces (APIs), User Authentication, Unit Testing, Cloud Computing, System Configuration, Identity and Access Management, Scrum Methodology, Role-Based Access Control, SAP (Applications), SAP GRC, SAP Project System, SAP Security, Software Deployment, User Provisioning Software, Cloud Platform System, Sap Fiori, Integration Tests, SAP S/4HANA, Cloud Connectors, SailPoint, User Administration - **Published:** September 3, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5868805963 ## About the Role * We require strong hands-on experience with SAP IAM modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Role Design Provisioning (RDP). * We require a deep understanding of SAP authorization concepts, including roles, profiles, objects, user administration, and access control. * We require experience with SAP S/4HANA and ECC security. * We require Segregation of Duties (SoD) risk management experience, including rule set configuration and maintenance, risk identification and mitigation strategies, and compliance frameworks such as SOX and audit controls. * We require identity and access management concepts, including user lifecycle management and role-based access control (RBAC). * We require hands-on experience with SAP IAS (Identity Authentication Service) and SAP IPS (Identity Provisioning Service). * We require experience integrating SAP IAM with SAP applications and cloud systems. * We require experience configuring access request workflows, including multi-stage approval workflows, risk-based access request processes, and access provisioning workflows. * We require strong problem-solving and analytical skills. * We require effective communication with business and technology stakeholders. * We require Agile/Scrum experience. * Desirable: experience with advanced SAP landscapes, including hybrid landscapes and multi-system environments. * Desirable: basic knowledge of technical development, such as ABAP, SAP Fiori/UI5, APIs, and automation. * Desirable: experience integrating IAM with third-party IAM tools such as SailPoint and with cloud applications. * Desirable: knowledge of compliance and governance frameworks, including SOX, GDPR, and ISO27001, and experience in audit handling. * Desirable: SAP Security, SAP IAM, or SAP GRC certifications, or related certifications such as CISA or CISSP. ## Description * We implement and configure SAP IAM modules, including ARA, ARM, EAM, and RDP. * We support deployment across SAP S/4HANA, ECC, and cloud applications. * We perform Segregation of Duties (SoD) risk analysis. * We identify and mitigate critical access risks and compliance violations. * We define and maintain risk rulesets and mitigation controls. * We design and maintain business roles, technical roles, role hierarchies, and authorizations. * We manage user provisioning and de-provisioning, access requests, and approval workflows. * We integrate SAP IAM with SAP IAS, SAP IPS, SAP GRC systems in hybrid landscapes, and non-SAP systems via connectors and APIs. * We configure cloud connectors and identity federation. * We configure access request workflows, including multi-level approval processes and risk-based approvals. * We customize business rules and notification mechanisms. * We perform unit testing, integration testing, and UAT support. * We manage transport of configurations and production deployments. * We maintain functional and technical documentation and access governance policies. * We define standards for role naming conventions and access control practices. Technologies: * ABAP * ARM * Architect * Cloud * EAM * IAM * Support * Network * RBAC * SAP S/4HANA * SAP * SAP Fiori * Security ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward) - [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)