Job Title: Senior SAP BTP Security Architect - Fulltime Only (Remote – USA/Canada)
The Role
We are seeking a seasoned SAP BTP Security Architect for a permanent, full-time position. As a key member of our onshore team, you will lead the security strategy for our SAP cloud ecosystem. This role is 100% remote but requires residency in the United States or Canada to align with our core business hours and compliance requirements.
You will be the bridge between high-level architectural design and "hands-on" BTP administration, ensuring our platform is secure, compliant, and optimized for innovation.
Key Responsibilities
• Security Architecture & Design: Lead the end-to-end security design for SAP BTP Global Accounts, Sub-accounts, and various environments (Cloud Foundry, Kyma, ABAP).
• Platform Administration: Act as the lead administrator for BTP, managing entitlements, sub-account hierarchies, and service provisioning with a "security-first" mindset.
• IAM & Identity Governance: Design and implement complex Identity and Access Management (IAM) strategies using SAP Cloud Identity Services (IAS/IPS) and integration with Azure AD, Okta, or Ping.
• Connectivity Management: Securely manage hybrid connectivity, including Cloud Connector high-availability setups, Principal Propagation, and API-led integration security.
• Compliance & Audit: Perform regular security audits, manage SSL certificates, and ensure the landscape adheres to SOC2, GDPR, or industry-specific compliance standards.
• Strategic Communication: Partner with C-level stakeholders to explain security implications and lead technical discussions with offshore development teams.
Required Qualifications
• Experience: 8+ years in SAP Landscape Architecture with at least 3-5 years of deep, hands-on experience in SAP BTP administration.
• Cloud Security Expertise: Expert-level knowledge of OAuth 2.0, SAML, JWT, and OpenID Connect (OIDC).
• Connectivity: Proven experience configuring SAP Cloud Connector and Destination Management for secure data flow between On-Premise and Cloud.
• BTP Tooling: Proficiency in BTP Cockpit, Command Line Interface (CLI), and BTP Resource Management.
• Location: Must be based in the USA or Canada (Full-time Remote).
Preferred Skills
• Certifications: SAP Certified Professional – Solution Architect (SAP BTP) or SAP Certified Technology Associate - SAP BTP and Business Application Security.
• Development Exposure: Understanding of security in the Cloud Application Programming (CAP) model or SAPUI5.
• Cross-Cloud Knowledge: Familiarity with Hyperscaler security (Azure, AWS, or GCP) as it relates to SAP RISE or BTP.
Apply Now
Apply Now