SAP Consultant (IAG)

Salary: £85,000 - 100,000 per year

Requirements:

• Proven hands-on experience implementing and supporting SAP Identity Access Governance (IAG)
• Strong SAP Security and authorisation knowledge across SAP S/4HANA and SAP ECC
• Practical experience with ARA, ARM, EAM and RDP
• Strong experience with Segregation of Duties (SoD) analysis and mitigation controls
• Good knowledge of SAP IAS and SAP IPS
• Experience integrating SAP IAG with SAP GRC and third-party identity management platforms
• Experience configuring approval workflows, business rules and user provisioning processes
• A strong understanding of identity governance, access management, compliance and audit requirements
• Excellent communication and stakeholder management skills, with the ability to work effectively across technical and business teams
• Experience working on large-scale SAP transformation or migration programmes
• Knowledge of hybrid SAP landscapes and cloud identity services
• Exposure to SailPoint or Microsoft Entra ID
• SAP Security or SAP IAG certifications

Responsibilities:

• Design, implement and support SAP Identity Access Governance (IAG) solutions
• Configure and deliver IAG capabilities including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP)
• Deliver SAP IAG solutions across SAP S/4HANA, SAP ECC and SAP Cloud environments
• Perform Segregation of Duties (SoD) analysis and identify, assess and mitigate access risks
• Develop and maintain risk rulesets, mitigation controls and compliance policies
• Design and maintain business and technical roles, role hierarchies and SAP authorisation concepts
• Manage user lifecycle processes including provisioning, de-provisioning, access requests and approval workflows
• Configure and optimise access request workflows, including multi-stage and risk-based approvals
• Integrate SAP IAG with SAP IAS, SAP IPS, SAP GRC and third-party identity platforms
• Support identity federation, cloud connectors and API-based integrations with non-SAP applications
• Support solution testing, UAT, deployment and post-go-live activities
• Work closely with security, compliance, audit and business teams to ensure access remains secure and compliant

Technologies:

• API
• ARM
• Cloud
• EAM
• IAM
• Support
• SAP S/4HANA
• SAP
• Security

More:

We are hiring a SAP IAG IAM Consultant for a permanent hybrid role based in London, offering a salary of £85,000-£100,000 plus excellent benefits. You will join a major enterprise transformation programme and work across modern SAP environments including S/4HANA, ECC and SAP Cloud. This is an excellent opportunity to work at the intersection of SAP Security, Identity Governance and enterprise transformation, taking ownership of SAP IAG solutions from design and configuration through to testing, deployment and ongoing optimisation.

last updated 33 week of 2026