Requirements

- Experience: 4-8 years of hands-on experience in SAP Security, GRC, and identity governance, with at least 2 years dedicated to ABAC implementation and integration.
- ABAC Architecture: Deep technical understanding of ABAC architecture, XACML policy structures, attribute providers, Policy Decision Points (PDP), and Policy Enforcement Points (PEP).
- ABAC Policy Tools: Hands-on experience with enterprise ABAC policy tools such as NextLabs Enterprise Digital Rights Management/DAE, SAP Energetic Authorization Management, or Axiomatics.
- SAP Security: Proficiency in SAP Security architecture across SAP S/4HANA, SAP ECC, SAP Fiori, and SAP BTP (Business Technology Platform).
- SAP Authorization: Strong knowledge of SAP authorization objects, SU24, PFCG roles, and authorization trace tools such as ST01 and STAUTHTRACE.
- Integration Identity Skills: Experience linking SAP access controls with identity providers such as Azure AD/Entra ID and Okta, along with SAML 2.0, OAuth 2.0, and SCIM protocols.
- Scripting Logic: Familiarity with ABAP, Java, Python, or SQL for custom attribute retrieval and authorization exit enhancements.

Good-to-Have Skills

- SAP GRC (Access Control / Process Control) implementation experience.
- Industry security certifications such as CISM, CISSP, or SAP Certified Technology Associate - SAP System Security.
- Exposure to cloud-native security and microservices authorization frameworks such as OPA (Open Policy Agent).

Responsibilities

- ABAC Architecture Policy Design:



Design and implement dynamic ABAC framework rules based on user attributes, environmental factors, resource sensitivity, and contextual data across SAP systems.
- SAP Security Integration: Integrate ABAC policy engines such as NextLabs, SAP Dynamic Authorization Management, or custom XACML-based engines with SAP S/4HANA, SAP ECC, SAP BTP, and Fiori applications.
- Access Control Governance: Define, test, and manage fine-grained authorization policies, including data-level, field-level, and transaction-level filtering, to enforce Segregation of Duties (SoD) and least-privilege principles.
- API Middleware Integration: Build and configure secure connectors, REST/SOAP APIs, and middleware interfaces between SAP authorization layers and external IAM/IdP platforms such as Azure AD/Entra ID, Okta, and Ping Identity.
- Policy Rule Authoring: Write and maintain policy logic using XACML, JSON, or vendor-specific policy languages to govern critical SAP modules, including FIN, MM, SD, and HR/HCM.
- Compliance Auditing: Conduct access reviews, automate audit logging, and ensure enterprise compliance with frameworks such as SOX, GDPR, ISO 27001, and HIPAA.
- Troubleshooting Optimization: Diagnose performance bottlenecks in real-time attribute evaluations and optimize policy resolution speeds during high-volume SAP transactions.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 ABAC Integrator / SAP Security & Access Governance Specialist (Mumbai)
🏢 Brained
📍 Mumbai