SAP Joule AI Security Architect

Job Title: SAP Joule AI Security Architect

Location: Houston, TX – Onsite

Employment Type: Contract

Duration: 12 Months

Pay Range: $75/hr - $85/hr

About VLink: Started in 2006 and headquartered in Connecticut, VLink is one of the fastest

growing digital technology services and consulting companies. Since its inception, our innovative

team members have been solving the most complex business, and IT challenges of our global

clients.

Job Description:

Hands-on security architecture role responsible for the security posture of Joule deployments — access control, data governance, and risk — working directly with the business and IT to clear use cases for POC and production.

Key Responsibilities:

Define and implement security architecture for Joule deployments, including authentication, authorization, and role-based access

Design role-based access controls, least-privilege access, segregation of duties (SoD), and privileged/emergency access processes for AI administrators, developers, business users, and service accounts

Assess data sensitivity and enforce data governance controls for each Joule use case

Define controls to prevent unauthorized data exposure through prompts, AI agents, and integrations, and review AI use cases for data leakage and privacy concerns

Partner with GRC to map Joule skills and access against governance, risk, and compliance requirements

Define and maintain SAP AI security policies, standards, and governance frameworks, including approval and review processes for AI use cases before production deployment

Perform hands-on security reviews and risk assessments for each POC prior to business rollout

Conduct security reviews of custom AI agents, establish secure development lifecycle requirements, and define testing procedures for AI agent deployment and production release

Design and implement monitoring, logging, and audit trails for Joule usage

Validate secure configurations of AI services, APIs, integrations, and connectors, and support vulnerability management and remediation activities for SAP AI solutions

Drive security, observability, performance, compliance, and operational excellence standards for enterprise AI solutions across POC and production environments

Work directly with business stakeholders to explain and resolve security requirements without slowing delivery

Partner with the functional and technical roles throughout qualification, POC, and deployment

Keep IT informed of security risks, exceptions, and remediation status

Educate SAP teams on AI security risks and governance requirements, running workshops for developers, administrators, and business users, and developing guidance for secure prompt engineering and AI agent development

Maintain security documentation and support internal and external audits

Qualifications:

Hands-on security architecture experience in enterprise SAP or cloud environments

Experience with SAP GRC and access control frameworks

5+ years of SAP Security and GRC experience, including SAP S/4HANA Security, SAP GRC Access Control, and SAP Identity Services

Familiarity with AI/copilot-specific security risks, such as data leakage and prompt-based access issues

Knowledge of AI security principles, machine learning risks, generative AI technologies, and AI governance frameworks, with experience implementing them in enterprise environments

Experience with SAP BTP security model and Integration Suite security

Experience securing cloud-native AI platforms using SAP BTP, SAP AI Core, Kubernetes, hyperscalers, DevSecOps practices, observability controls, and distributed system security patterns

Familiarity with MCP Server environments hosted on SAP BTP, and the security implications of SAP AI Core, SAP AI Hub, and SAP AI Gateway integrations

Experience with SAP Business AI, Joule, SAP AI Core, SAP AI Launchpad, and SAP BTP AI services, along with cloud platform experience such as Microsoft Azure

Strong understanding of data governance and compliance requirements in an enterprise setting

Ability to work directly and collaboratively with business and technical teams, not just in a gatekeeping capacity

SAP Security, SAP GRC, CISSP, CISM, or cloud security certification

Equal Employment Opportunity (EEO) Statement:

VLink is an equal opportunity employer committed to fostering an inclusive environment where diversity is celebrated. All qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Employment is contingent upon successful completion of a background check.

This job application process may use AI-powered tools to assist in screening and evaluating applications based on objective, job-related qualifications. AI is used solely to support the recruitment process and all final hiring decisions are made exclusively by our human recruitment team.

Applicant information will be handled in accordance with VLink's privacy policy.