IDAM Specialist

The IDAM Specialist will be responsible for managing and securing enterprise identity and access systems while supporting SAP security operations. The role will ensures that user access across critical enterprise and retail platforms is properly governed, compliant, and aligned with business requirements. The consultant will lead and support Identity and Access Management (IAM) initiatives using platforms such as Microsoft Entra ID and Active Directory, while also contributing to SAP security administration, role design, license management, access governance, audit requirements, and SOX compliance.

Key Responsibilities

Identity & Access Management (IAM)

• Manage user onboarding, provisioning, deprovisioning, and access changes.
• Administer Microsoft Entra ID, including user creation, group management, and role allocation.
• Support Active Directory administration, user lifecycle management, and group policies.
• Perform log analysis across Entra ID, Active Directory, and other IAM platforms.
• Conduct periodic access reviews across SAP and enterprise applications.
• Identify and remediate stale accounts, excessive privileges, and inappropriate access.
• Generate and analyze user access reports for compliance and audit purposes.
• Design group structures and role-based access models.
• Support MFA deployment, password policies, SSO, and identity governance initiatives.
• Implement and maintain RBAC and other access control models.
• Develop secure solutions for legacy or isolated systems.
• Support identity mapping and integration across enterprise platforms.

SAP Security

• Perform day-to-day SAP security administration, including user and role management.
• Design, implement, and maintain SAP security and authorization models.
• Support SAP security requests, access provisioning, and troubleshooting.
• Conduct SAP license audits, including SLAW/LAW, and manage license allocation and deallocation.
• Align SAP security authorizations with SOX controls and compliance requirements.
• Support SAP HANA Cloud identity mapping and access management.
• Develop SAP security strategies, policies, procedures, architecture, and implementation plans.
• Review SAP security project deliverables to ensure alignment with business and security objectives.
• Provide hands-on expertise in SAP authorization concepts, role design, and user administration.

Security, Compliance & Projects

• Support internal and external audits, compliance reviews, and access certification activities.
• Develop and enforce enterprise IAM policies, procedures, and best practices.
• Integrate SAP security with broader enterprise IAM frameworks.
• Work with business and IT stakeholders to identify security requirements and recommend appropriate solutions.
• Support initiatives involving SAML, OAuth, and OIDC authentication protocols.
• Implement automation and scripting to improve IAM processes and operational efficiency.
• Investigate security and access-related issues and recommend remediation.
• Contribute to continuous improvement of enterprise identity and access controls.

Qualifications & Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Strong hands-on experience in SAP Security, including user administration, role design, authorization concepts, and access management.
• Experience in Identity and Access Management (IAM/IDAM) using platforms such as Microsoft Entra ID, Active Directory, Okta, AWS IAM, Ping Identity, ForgeRock, or similar.
• Strong proficiency in Microsoft Entra ID, including user creation, group management, role allocation, and integration.
• Strong Active Directory experience, particularly in user lifecycle management and group policies.
• Experience with SAP license management, including SLAW/LAW.
• Experience managing license allocation and deallocation to identities.
• Knowledge of access review, access certification, audit, and compliance processes.
• Experience generating and interpreting user access and compliance reports.
• Experience identifying and remediating stale accounts and excessive privileges.
• Hands-on experience with MFA, SSO, RBAC, and identity governance.
• Strong knowledge of SAML, OAuth, and OIDC authentication protocols.
• Experience developing secure solutions for legacy systems and integrating them with enterprise IAM platforms.
• Experience with identity mapping processes in SAP HANA Cloud is preferred.
• Experience with automation and scripting is preferred.
• Familiarity with IT security frameworks, policies, and industry best practices.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent communication and stakeholder management skills.
• Ability to develop and enforce IAM policies, procedures, and security best practices.
• Ability to integrate SAP Security with broader enterprise IAM frameworks.
• SAP Security certification or equivalent hands-on experience is preferred.