Senior Developer

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Cloud Engineering · Software Engineering

In short

We are seeking an experienced SAP BTP Security Consultant with strong expertise in Cloud Foundry security, Identity and Access Management (IAM), SAP BTP platform security, and integration security. The consultant will be responsible for designing, implementing, and governing security controls across SAP BTP landscapes while ensuring compliance with enterprise security standards and cloud security best practices.

Responsibilities

Design and implement security architecture for SAP BTP Cloud Foundry environments.
Configure and manage authentication and authorization mechanisms across BTP services.
Administer users, roles, role collections, and trust configurations.
Implement Single Sign-On (SSO) solutions using SAP Identity Authentication Service (IAS).
Configure Identity Provisioning Service (IPS) for user lifecycle management.
Secure SAP Build Work Zone, SAP Fiori applications, CAP applications, and Integration Suite services.
Manage OAuth 2.0, SAML 2.0, OpenID Connect, and JWT-based authentication.
Conduct security assessments, vulnerability reviews, and access audits.
Support compliance initiatives related to GDPR, SOX, ISO 27001, and internal security policies.
Implement secure communication between SAP BTP and on-premise systems using SAP Cloud Connector.
Collaborate with enterprise architects, infrastructure teams, and application teams on cloud security governance.
Configure and manage Cloud Foundry Organizations and Spaces.
Define platform-level access controls.
Implement segregation of duties and least-privilege access principles.
Monitor security logs and audit trails.
Support production deployments from a security and governance perspective.
Review service bindings, secrets, environment variables, and connectivity settings.

Requirements

5–8 years of experience.
Strong expertise in Cloud Foundry security, Identity and Access Management (IAM), SAP BTP platform security, and integration security.
Experience designing, implementing, and governing security controls across SAP BTP landscapes.
Knowledge of enterprise security standards and cloud security best practices.
Experience with SAP BTP Cloud Foundry, SAP Authorization Concepts, Role Collections, XSUAA, Trust Configuration, Entitlements & Quotas, Global Account and Subaccount Administration.
Proficiency in SAP Identity Authentication Service (IAS) and SAP Identity Provisioning Service (IPS).
Familiarity with Azure Active Directory / Microsoft Entra ID and Active Directory Integration.
Experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and JWT-based authentication.
Experience with Multi-Factor Authentication (MFA).
Knowledge of SAP Cloud Connector, Destination Service Security, Connectivity Service Security, Credential Management, Certificate Management, and Principal Propagation.
Understanding of SAP Fiori Security, SAPUI5 Security, SAP Build Work Zone Security, CAP Application Security, API Security, and Integration Suite Security.
Experience configuring and managing Cloud Foundry Organizations and Spaces.
Familiarity with defining platform-level access controls.
Knowledge of segregation of duties and least-privilege access principles.
Experience monitoring security logs and audit trails.

Desired Qualifications

Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.
Experience supporting compliance initiatives related to GDPR, SOX, ISO 27001, and internal security policies.

Benefits

Global technology company with over 223,000 people across 60 countries.
Industry-leading capabilities centered around digital, engineering, cloud, and AI.
Broad portfolio of technology services and products.
Work with clients across all major verticals, including Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services.
Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.

Skills

SAP BTP Cloud FoundrySAP Authorization ConceptsRole CollectionsXSUAATrust ConfigurationEntitlements & QuotasGlobal Account and Subaccount AdministrationSAP Identity Authentication Service (IAS)SAP Identity Provisioning Service (IPS)Azure Active DirectoryMicrosoft Entra IDActive Directory IntegrationSAML 2.0OAuth 2.0OpenID ConnectJWTMulti-Factor Authentication (MFA)SAP Cloud ConnectorDestination Service SecurityConnectivity Service SecurityCredential ManagementCertificate ManagementPrincipal PropagationSAP Fiori SecuritySAPUI5 SecuritySAP Build Work Zone SecurityCAP Application SecurityAPI SecurityIntegration Suite Security

#SAP#BTP#Security#Cloud Foundry#IAM#Cloud#Consultant

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website