Senior SAP BTP Identity Services Consultant - IAS/IPS Modules

Role : Senior SAP BTP Identity services consultant Exp : 8 Locations : The Senior SAP BTP Identity services consultant will work under the supervision of the Solutions Architect team lead. Related responsibilities will include : - Design and propose solutions to secure cloud-based applications like a business app using SAP CAP model and Node.js implementing authentication and authorizations from these applications. - Propose secured designs & solutions for SAP cloud-based applications to consume APIs from external systems like corporate identity systems Azure AD, Azure AD B2C and BTP IAS utilizing destinations, connections, etc. - Design and configure BTP IAS for authenticating internal and external users utilizing corporate identity providers like Azure AD, Azure AD B2C, etc. - Design and implement IPS to sync application users with SAP BTP. - Customize user flows and authentication processes to meet specific organizational needs. - Implement necessary enhancements based on best practices and organizational feedback. - Perform testing of the IAS/IPS setup, including performance testing, security testing, and user acceptance testing (UAT) of the implemented authentication/authorizations mechanisms. - Prepare detailed documentation of the configurations and processes implemented. - Conduct training sessions for internal IT teams and end-users to ensure effective use of the identity services. - Periodically provide status updates and activity summaries to respective teams and/or team lead. - Minimum 3 years of experience designing and implementing secured applications utilizing SAP BTP cloud identity services. - Experience to set up Trust Configuration (SAML or OIDC) & Cloud Identity Authentication in BTP platform level is critical. - Minimum 3 years of hands-on experience with SAP Identity Authentication Service (IAS) and SAP Identity Provisioning Service (IPS) for managing user identities, authentication, and SSO. - Experience integrating applications programmatically using authentication via APIs. - Understanding and experience with SCIM REST APIs to manage users & groups; invite users etc. - Strong understanding of security concepts in SAP BTP and its integration with other SAP and non SAP systems and possess hands-on experience in securing applications on SAP BTP cloud foundry. - Hands-on experience in configuring organization identity provider as the custom identity provider for external & internal users configuring conditional authentication in IAS based on e-mail domain, user type or user group. - Hands-on experience in configuring IPS to provision external users into ECC. - Ability to design and implement secure authentication and authorization processes. - Good understanding of SAP service layer, BTP configurations like Destinations, connectivity required in the development process. - Basic knowledge of SAP BTP services like Work Zone, Business Application Studio & how they integrate with/via IAS. - Strong understanding of general cloud security principles and experience with identity and access management (IAM) principles, SSO, MFA, and user provisioning. (ref:hirist.tech)

Location: in, IN

Posted Date: 11/19/2024