SAP IAG IAM Consultant

Salary: £85,000 - 100,000 per year

Requirements:

• Proven experience implementing and supporting SAP Identity Access Governance (IAG)
• Strong knowledge of SAP security and authorisation concepts across SAP S/4HANA and SAP ECC
• Hands-on experience with Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Role Design & Provisioning (RDP)
• Experience performing Segregation of Duties (SoD) analysis and implementing mitigation controls
• Strong understanding of SAP IAS and SAP IPS
• Experience integrating SAP IAG with SAP GRC and third-party identity management solutions
• Knowledge of identity governance, access management, compliance, and audit requirements
• Experience configuring approval workflows, business rules, and user provisioning processes
• Excellent stakeholder management and communication skills
• Experience working within large-scale SAP transformation or migration programmes is desirable
• Knowledge of hybrid SAP landscapes and cloud identity services is desirable
• Familiarity with identity governance platforms such as SailPoint or Microsoft Entra ID is desirable
• SAP Security or SAP IAG certifications would be advantageous

Responsibilities:

• Implement and configure SAP Identity Access Governance (IAG) modules, including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Role Design & Provisioning (RDP)
• Deliver SAP IAG solutions across SAP S/4HANA, SAP ECC, and SAP Cloud environments
• Perform Segregation of Duties (SoD) analysis to identify, assess, and mitigate access risks
• Develop and maintain risk rulesets, mitigation controls, and compliance policies
• Design, build, and maintain business and technical roles, role hierarchies, and authorisation concepts
• Manage user lifecycle processes including provisioning, de-provisioning, access requests, and approval workflows
• Integrate SAP IAG with SAP Identity Authentication Service (IAS), SAP Identity Provisioning Service (IPS), SAP GRC, and third-party identity platforms where required
• Configure identity federation, cloud connectors, and API-based integrations with non-SAP applications
• Configure and optimise access request workflows, including multi-stage approvals, risk-based approvals, business rules, and automated notifications
• Support solution testing, user acceptance testing (UAT), deployment activities, and post-go-live support
• Work closely with security, compliance, audit, and business stakeholders to ensure secure and compliant access governance

Technologies:

• API
• ARM
• Cloud
• EAM
• Support
• SAP S/4HANA
• SAP
• Security
• IAM

More:

We are seeking an experienced SAP Identity & Access Management professional to play a key role in enterprise SAP security and governance programmes. This role offers the opportunity to design, implement, and support SAP Identity Access Governance (IAG) solutions across complex SAP landscapes, working across SAP S/4HANA, SAP ECC, and SAP Cloud environments. You will collaborate closely with security, compliance, audit, and business stakeholders to help ensure secure and compliant access governance.

last updated 32 week of 2026