SAP Business Technology Platform (BTP) Security Architect Manager

About the role

JTI is looking for an experienced SAP Business Technology Platform (BTP) Security Architect Manager to design, implement, and maintain secure access models across our SAP BTP and broader SAP cloud landscape. You will work closely with SAP Basis, IT Security, functional, and internal control teams to embed security governance and risk‑based controls.

Key responsibilities

• Design and maintain the BTP security architecture, including sub‑account structure, trust configuration, and connectivity to Identity Providers.
• Define, document, and enforce security standards and governance models for multi‑tenant SAP cloud environments.
• Implement and optimise Identity Authentication (IAS) and Identity Provisioning (IPS) services.
• Develop and sustain role‑based (RBAC) and attribute‑based (ABAC) access control models for the SAP BTP landscape.
• Act as the liaison between business, IT, compliance, and legal stakeholders to align access design and implementation plans.
• Manage SAP Cloud security parameters for administrators, developers, and integration users, ensuring Segregation of Duties (SoD) compliance.
• Identify automation opportunities to improve internal processes and leverage existing system functionality.
• Create training materials and deliver knowledge transfer to SAP security staff and other stakeholders.
• Support integration with Identity and Access Management solutions such as SailPoint/IdentityIQ.

Required profile

• Extensive experience with SAP Business Technology Platform (BTP) security, identity management, and access governance.
• Proven ability to work with SAP Basis, IT security, and functional teams in a complex, multi‑cloud environment.
• Strong understanding of corporate compliance, SAP best practices, and risk‑based security frameworks.
• Excellent communication skills to coordinate with business, IT, and compliance stakeholders.

Required skills

• SAP Business Technology Platform (BTP)
• SAP Basis
• SAP Cloud Identity Services
• Identity Authentication (IAS)
• Identity Provisioning (IPS)
• Role‑Based Access Control (RBAC)
• Attribute‑Based Access Control (ABAC)
• SailPoint / IdentityIQ