Mumbai

4-8 years

Full time

- ABAC Architecture & Policy Design: Design and implement dynamic ABAC framework rules based on user attributes, environmental factors, resource sensitivity, and contextual data across SAP systems.
- SAP Security Integration: Integrate ABAC policy engines such as NextLabs, SAP Dynamic Authorization Management, or custom XACML-based engines with SAP S/4HANA, SAP ECC, SAP BTP, and Fiori applications.
- Access Control & Governance: Define, test, and manage fine-grained authorization policies, including data-level, field-level, and transaction-level filtering, to enforce Segregation of Duties (SoD) and least-privilege principles.
- API & Middleware Integration: Build and configure secure connectors, REST/SOAP APIs, and middleware interfaces between SAP authorization layers and external IAM/IdP platforms such as Azure AD/Entra ID, Okta, and Ping Identity.
- Policy Rule Authoring: Write and maintain policy logic using XACML, JSON, or vendor-specific policy languages to govern critical SAP modules, including FIN, MM, SD, and HR/HCM.
- Compliance & Auditing: Conduct access reviews, automate audit logging, and ensure enterprise compliance with frameworks such as SOX, GDPR, ISO 27001, and HIPAA.
- Troubleshooting & Optimization: Diagnose performance bottlenecks in real-time attribute evaluations and optimize policy resolution speeds during high-volume SAP transactions.
- Experience: 4–8 years of hands-on experience in SAP Security, GRC, and identity governance, with at least 2 years dedicated to ABAC implementation and integration.
- ABAC Architecture: Deep technical understanding of ABAC architecture, XACML policy structures, attribute providers, Policy Decision Points (PDP), and Policy Enforcement Points (PEP).




- ABAC Policy Tools: Hands-on experience with enterprise ABAC policy tools such as NextLabs Enterprise Digital Rights Management/DAE, SAP Dynamic Authorization Management, or Axiomatics.
- SAP Security: Proficiency in SAP Security architecture across SAP S/4HANA, SAP ECC, SAP Fiori, and SAP BTP (Business Technology Platform).
- SAP Authorization: Strong knowledge of SAP authorization objects, SU24, PFCG roles, and authorization trace tools such as ST01 and STAUTHTRACE.
- Integration & Identity Skills: Experience linking SAP access controls with identity providers such as Azure AD/Entra ID and Okta, along with SAML 2.0, OAuth 2.0, and SCIM protocols.
- Scripting & Logic: Familiarity with ABAP, Java, Python, or SQL for custom attribute retrieval and authorization exit enhancements.

Good-to-Have Skills

- SAP GRC (Access Control / Process Control) implementation experience.
- Industry security certifications such as CISM, CISSP, or SAP Certified Technology Associate - SAP System Security.
- Exposure to cloud-native security and microservices authorization frameworks such as OPA (Open Policy Agent).

Why Join Brained?

- High-Impact Governance: Lead the modernization of core enterprise security architectures for enterprise scale.
- Cutting-Edge Tech Stack: Work at the intersection of enterprise SAP systems, AI-driven workflows, and modern zero-trust security.
- Competitive Package: Excellent salary, performance bonuses, and growth opportunities.
- Collaborative Culture: Direct exposure to technical leadership in an environment with zero bureaucracy.

How to Apply Interested candidates can send their resume along with a summary of past SAP ABAC or security integration projects to: [email protected]

📌 ABAC Integrator / SAP Security & Access Governance Specialist (Mumbai)
🏢 Brained
📍 Mumbai