> Markdown version of [/jobs/ext/3644460-sr-manager-sap-security-architect](https://www.wearedevelopers.com/jobs/ext/3644460-sr-manager-sap-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Manager SAP Security Architect

- **Company:** Deloitte T.T.L.
- **Location:** Indianapolis, IN, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** SAP Cloud, Artificial Intelligence, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Internet Security, Key Management, Network Segmentation, OAuth, OpenID, Open Web Application Security, Role-Based Access Control, SuccessFactors, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), SAP (Applications), SAP Business Suiteing, SAP HANA, SAP Security, Single Sign-On, Cloud Platform System, Large Language Models, Generative AI, SAP Business Technology Platform, Agentic-AI, Togaf, Build Management, Spoofing, SAP S/4HANA, SAP Ariba, Fieldglass, Claude, Api Management, Agent2Agent Protocol
- **Published:** October 9, 2026
- **Apply:** https://www.indianapolisgigs.com/job.asp?id=3426240440&tx=TT434THZ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

Required

 * 10+ years of experience in enterprise IT, with a substantial track record in solution or security architecture on large, complex programs.
 * Deep, hands-on security architecture experience across a SAP-centric landscape - demonstrable work securing S/4HANA and other SAP applications, and designing secure integrations between them.
 * Strong command of identity and access management, including practical experience with OAuth 2.0 / OIDC and SAML 2.0, single sign-on, federation, and identity lifecycle/provisioning.
 * Strong knowledge of identity management on SAP BTP (SAP Cloud Identity Services - IAS/IPS, trust, role collections, and federation), sufficient to define the architecture, standards, and guidelines for implementation teams.
 * Working knowledge of Microsoft Azure security services and cloud security patterns (identity, network, key/secrets management), including integration between Azure and SAP.
 * Proven ability to produce security architecture artifacts (HLD/LLD/ADRs), lead threat modeling and security/risk assessments, and drive designs into production.
 * Experience partnering with an enterprise or global cyber function - aligning designs to cyber and regulatory standards, and preparing for and successfully navigating cyber/security architecture reviews.
 * Demonstrated knowledge of AI and agentic AI concepts and associated security risks, with experience, training, certification, or project work involving LLMs, AI agents, SAP Joule, Claude, MCP-based integrations, or comparable technologies.
 * Experience influencing and advising senior stakeholders and delivery teams as a recognized technical authority, and leading technical teams through influence and dotted-line relationships rather than direct authority.

Preferred

 * Familiarity with SAP Business Data Cloud (BDC) and SAP HANA security, and with cloud procurement/HR SaaS platforms in the portfolio (Ariba, Fieldglass, Concur, SuccessFactors).
 * Hands-on experience securing production AI/agentic deployments - agent identity and authorization, prompt/output safeguards, and agent-to-agent (A2A) or MCP-based integration security.
 * Relevant security certifications (e.g., CISSP, CCSP, SABSA, TOGAF) and/or Azure security certifications (e.g., AZ-500) and SAP credentials.
 * Familiarity with zero-trust, OWASP, RBAC/ABAC/ReBAC authorization models, and regulatory/compliance frameworks (e.g., SOX, data-privacy regulations).

## Description

Security architecture & design

 * Own the end-to-end security architecture for the Enterprise Solutions portfolio - defining reference architectures, security design patterns, and control standards that apply across SAP and non-SAP platforms.
 * Produce fit-for-purpose security artifacts (security architecture overviews, high- and low-level designs, and architecture decision records) and review solution designs for security risk before build and deployment.
 * Embed security-by-design and zero-trust principles into solution and integration architectures, including data protection, encryption, network segmentation, and secure API/integration patterns (e.g., across SAP BTP Integration Suite and Azure).
 * Conduct security and risk assessments, threat modeling, and design reviews; define mitigations and track them to closure with delivery teams.

AI & agentic platform security (priority focus)

 * Lead security architecture for the AI and agentic platforms that are increasingly embedded across the portfolio - including SAP Joule and other agentic/GenAI capabilities - as SAP and adjacent platforms are modernized and agentified. This is a defining, high-priority dimension of the role.
 * Define how AI agents authenticate and are authorized: agent identity, scoped and least-privilege access, delegation and impersonation boundaries, data-access limits, and human-in-the-loop controls for autonomous actions.
 * Establish safeguards for prompts, tools, and outputs (e.g., prompt-injection and data-exfiltration defenses) and secure patterns for agent-to-system and agent-to-agent (A2A) interactions across the SAP and cloud estate.
 * Set the emerging security standards, guardrails, and reference patterns for agentic development - including tooli