Senior SAP BTP Security Architect- Fulltime only (Remote – USA/Canada)
Job Title: Senior SAP BTP Security Architect - Fulltime Only (Remote – USA/Canada) The Role We are seeking a seasoned SAP BTP Security Architect for a permanent, full-time position. As a key member of our onshore team, you will lead the security strategy for our SAP cloud ecosystem. This role is 100% remote but requires residency in the United States or Canada to align with our core business hours and compliance requirements. You will be the bridge between high-level architectural design and "hands-on" BTP administration, ensuring our platform is secure, compliant, and optimized for innovation. Key Responsibilities • Security Architecture & Design: Lead the end-to-end security design for SAP BTP Global Accounts, Sub-accounts, and various environments (Cloud Foundry, Kyma, ABAP). • Platform Administration: Act as the lead administrator for BTP, managing entitlements, sub-account hierarchies, and service provisioning with a "security-first" mindset. • IAM & Identity Governance: Design and implement complex Identity and Access Management (IAM) strategies using SAP Cloud Identity Services (IAS/IPS) and integration with Azure AD, Okta, or Ping. • Connectivity Management: Securely manage hybrid connectivity, including Cloud Connector high-availability setups, Principal Propagation, and API-led integration security. • Compliance & Audit: Perform regular security audits, manage SSL certificates, and ensure the landscape adheres to SOC2, GDPR, or industry-specific compliance standards. • Strategic Communication: Partner with C-level stakeholders to explain security implications and lead technical discussions with offshore development teams. Required Qualifications • Experience: 8+ years in SAP Landscape Architecture with at least 3-5 years of deep, hands-on experience in SAP BTP administration. • Cloud Security Expertise: Expert-level knowledge of OAuth 2.0, SAML, JWT, and OpenID Connect (OIDC). • Connectivity: Proven experience configuring SAP Cloud Connector and Destination Management for secure data flow between On-Premise and Cloud. • BTP Tooling: Proficiency in BTP Cockpit, Command Line Interface (CLI), and BTP Resource Management. • Location: Must be based in the USA or Canada (Full-time Remote). Preferred Skills • Certifications: SAP Certified Professional – Solution Architect (SAP BTP) or SAP Certified Technology Associate - SAP BTP and Business Application Security. • Development Exposure: Understanding of security in the Cloud Application Programming (CAP) model or SAPUI5. • Cross-Cloud Knowledge: Familiarity with Hyperscaler security (Azure, AWS, or GCP) as it relates to SAP RISE or BTP. Apply tot his job