SAP Security Engineer

Ford Motor Company

SAP Security Engineer focused on SAP Identity Access Governance and security for cloud deployments at Ford Energy. Responsible for securing SAP landscapes and compliance monitoring for cloud infrastructure.

Posted 7/16/2026full-timeDearborn • Missouri • 🇺🇸 United StatesMid-LevelSenior💰 $65,100 - $166,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SAP Cloud Security and Governance, with a strong focus on Identity and Access Management (IAM) and compliance monitoring. Proficient in implementing security measures for SAP workloads in public cloud environments, ensuring adherence to regulatory standards.

Highest-signal resume keywords

SAP SecurityIdentity Access Governance (IAG)Cloud SecuritySAP Authorization ConceptsVulnerability Assessments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SAP GRCSingle Sign-On (SSO)Multi-Factor Authentication (MFA)Segregation of Duties (SoD)Role DesignIncident ResponseForensic AnalysisSecurity AuditsConfiguration ReviewsCloud Infrastructure Security

Soft Skills

CollaborationCommunication

Tools & Technologies

SAP Cloud Identity ServicesMicrosoft Entra IDSAP Business Technology Platform (BTP)Enterprise SIEM PlatformsSAP Enterprise Threat Detection (ETD)

Certifications & Qualifications

SAP Certified Technology Associate - SAP System Security and AuthorizationsCloud-Specific Security Certifications

Industry Keywords

Renewable EnergyAutomotiveManufacturing OperationsSOC 2ISO 27001

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

SAP Cloud Security & Governance: Design, configure, and maintain secure access controls and segregation of duties (SoD) policies using SAP Identity Access Governance (IAG) and SAP Cloud Identity Services (IAS/IPS).
Public Cloud SAP Deployments: Partner with infrastructure and cloud engineering teams to secure SAP landscapes (such as SAP S/4HANA, BTP, and RISE with SAP) hosted on public cloud platforms.
Identity & Access Management (IAM): Implement and optimize user provisioning, single sign-on (SSO), multi-factor authentication (MFA), and federated identity flows between SAP systems, public clouds, and enterprise identity providers (e.g., Microsoft Entra ID).
Vulnerability & Compliance Monitoring: Conduct regular vulnerability assessments, security audits, and configuration reviews of public cloud SAP infrastructure and database layers (HANA security).
Policy & Control Enforcement: Translate corporate cybersecurity requirements into concrete SAP security baselines, ensuring compliance with internal policies and external regulatory standards (e.g., SOC 2, ISO 27001).
Role Design & Administration: Define, build, and audit SAP business roles, authorization objects, and emergency access management (Firefighter) procedures to maintain a least-privilege security posture.
Incident Support & Remediation: Act as the subject matter expert for SAP-related security incidents, assisting in rapid investigation, forensic analysis, and the implementation of permanent remediation measures.
Collaboration: Work closely with SAP functional teams, enterprise GRC analysts, cloud architecture teams, and external integration partners to ensure secure-by-design SAP deployments.

Requirements

What you’ll need

Experience: Minimum of 3–5 years of dedicated experience in SAP Security, including hands-on experience with SAP GRC or SAP Identity Access Governance (IAG).
Cloud Security: Demonstrated experience securing SAP workloads deployed in public cloud environments, including a strong understanding of cloud infrastructure security, network security groups, and IAM policies.
Access Management Tools: Practical experience implementing and configuring SAP Cloud Identity Services (Identity Authentication / Identity Provisioning) and enterprise IAM solutions.
SAP Authorization Concepts: Deep technical knowledge of SAP security architectures, authorization objects, role design (single, composite, and derived roles), and Segregation of Duties (SoD) analysis.
Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent related work experience.
Preferred
SAP Certified Technology Associate - SAP System Security and Authorizations, or cloud-specific security certifications.
Hands-on experience with SAP Business Technology Platform (BTP) security configurations and RISE with SAP compliance frameworks.
Experience in highly regulated industries such as Renewable Energy, Automotive, or manufacturing operations.
Experience configuring SAP Enterprise Threat Detection (ETD) or integrating SAP security logs with enterprise SIEM platforms (e.g., Microsoft Sentinel, SCC, Elastic).

Benefits

Comp & perks

Immediate medical, dental, vision and prescription drug coverage
Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
Vehicle discount program for employees and family members and management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
Paid time off and the option to purchase additional vacation time.