SAP Consultant (IAG)

Salary: £100,000 - 100,000 per year

Requirements:

• Proven hands-on experience implementing and supporting SAP Identity Access Governance (IAG).
• Strong SAP Security and authorisation knowledge across SAP S/4HANA and SAP ECC.
• Practical experience with ARA, ARM, EAM and RDP.
• Strong experience with Segregation of Duties (SoD) analysis and mitigation controls.
• Good knowledge of SAP IAS and SAP IPS.
• Experience integrating SAP IAG with SAP GRC and third-party identity management platforms.
• Experience configuring approval workflows, business rules and user provisioning processes.
• A strong understanding of identity governance, access management, compliance and audit requirements.
• Excellent communication and stakeholder management skills, with the ability to work effectively across technical and business teams.
• Desirable: experience working on large-scale SAP transformation or migration programmes.
• Desirable: knowledge of hybrid SAP landscapes and cloud identity services.
• Desirable: exposure to SailPoint or Microsoft Entra ID.
• Desirable: SAP Security or SAP IAG certifications.

Responsibilities:

• Design, implement and support SAP Identity Access Governance (IAG) solutions.
• Configure and deliver IAG capabilities including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP).
• Deliver SAP IAG solutions across SAP S/4HANA, SAP ECC and SAP Cloud environments.
• Perform Segregation of Duties (SoD) analysis and identify, assess and mitigate access risks.
• Develop and maintain risk rulesets, mitigation controls and compliance policies.
• Design and maintain business and technical roles, role hierarchies and SAP authorisation concepts.
• Manage user lifecycle processes including provisioning, de-provisioning, access requests and approval workflows.
• Configure and optimise access request workflows, including multi-stage and risk-based approvals.
• Integrate SAP IAG with SAP IAS, SAP IPS, SAP GRC and third-party identity platforms.
• Support identity federation, cloud connectors and API-based integrations with non-SAP applications.
• Support solution testing, UAT, deployment and post-go-live activities.
• Work closely with security, compliance, audit and business teams to ensure access remains secure and compliant.

Technologies:

• API
• ARM
• Cloud
• EAM
• Support
• SAP S/4HANA
• SAP
• Security
• IAM

More:

We are a major enterprise transformation programme offering an excellent benefits package, a salary of £85,000-£100,000, and a hybrid working arrangement based in London. We are looking for an experienced SAP Identity & Access Management professional to help design and deliver secure, compliant and scalable identity governance solutions across a complex SAP landscape. This is a permanent role working across modern SAP environments including S/4HANA, ECC and SAP Cloud, with close collaboration across security, compliance, audit and business stakeholders.

last updated 33 week of 2026