SAP IAG IAM Consultant

Salary: £68,000 - 108,000 per year

Requirements:

• Strong hands-on experience with SAP Identity Access Governance (IAG).
• Experience across ARA, ARM, EAM and RDP.
• Strong understanding of SAP authorisations, including roles, profiles, objects, user administration and access controls.
• Experience with SAP S/4HANA and/or ECC Security.
• Strong knowledge of Segregation of Duties (SoD), risk analysis and mitigation.
• Experience configuring and maintaining risk rulesets.
• Strong understanding of Identity & Access Management (IAM), including joiner, mover and leaver processes.
• Knowledge of Role Based Access Control (RBAC).
• Hands-on experience with SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
• Experience integrating SAP IAG with SAP applications and cloud systems.
• Experience configuring access request workflows, including multi-stage and risk-based approvals.
• Strong communication, stakeholder management and problem-solving skills.
• Experience working within Agile or Scrum environments.
• Experience working across hybrid SAP GRC and SAP IAG landscapes.
• Experience supporting complex multi-system SAP environments.
• Knowledge of ABAP and SAP Fiori/UI5.
• Familiarity with APIs and automation.
• Experience integrating SAP IAG with SailPoint or other third-party IAM technologies.
• Knowledge of SOX, GDPR and ISO 27001.
• Experience supporting audit and governance activities.
• SAP Security, SAP IAG or SAP GRC certifications.
• CISA or CISSP certification would be advantageous.

Responsibilities:

• Implement and configure SAP Identity Access Governance (IAG) capabilities including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP).
• Support SAP IAG deployments across S/4HANA, ECC and cloud applications.
• Perform Segregation of Duties (SoD) analysis, identifying access risks and compliance violations.
• Configure and maintain risk rulesets and mitigation controls.
• Design and maintain business roles, technical roles, role hierarchies and SAP authorisations.
• Manage user provisioning and de-provisioning, access requests and approval processes.
• Integrate SAP IAG with SAP IAS, SAP IPS, SAP GRC and wider cloud applications.
• Support integrations with third-party IAM platforms such as SailPoint using connectors and APIs.
• Configure multi-level and risk-based access approval workflows.
• Support identity federation and cloud connectivity.
• Perform unit and integration testing and provide support throughout UAT.
• Manage configuration transports and support production deployments.
• Produce functional and technical documentation covering access governance, roles and access control standards.

Technologies:

• ABAP
• ARM
• Cloud
• EAM
• IAM
• Support
• RBAC
• SAP S/4HANA
• SAP
• SAP Fiori
• Security

More:

We are a globally recognised technology organisation offering a permanent SAP IAG IAM Consultant role in London with hybrid working and a 40-hour full-time week. The position offers a salary of 80,000 to 90,000 plus benefits and bonus. You will work across complex enterprise SAP transformation programmes in automotive and manufacturing environments, gaining exposure to SAP IAG, SAP Security, S/4HANA, ECC, IAS, IPS, GRC and wider identity technologies, including third-party IAM integrations. We offer long-term professional development and career progression within a global technology environment.

last updated 34 week of 2026