Senior Security Analyst (SAP GRC/IAM)

Summary

The Senior Application Security Analyst is responsible for implementation and support of security roles and profiles in a diverse Enterprise Application environment. The role serves as an application and security subject matter expert in the design and build of application functionality and security authorization roles.

The successful candidate will have SAP Security experience, and have specific experience in SAP GRC and IAM to help integrate IAM tools into the enterprise SAP environment. 

The analyst also provides technical skills required for design, development and support for Identity Access Management (IAM) system (I like Saviynt) and other ERP applications like SAP within NYPA and responsible for installing upgrades and patches and analyze, design, code, and implement changes to enhance functionality or to accommodate business process changes within the various applications hosted on Prem and cloud. Also support cloud solution resources, SaaS, IaaS and PaaS, providing Architecting and designing large scale enterprise infrastructure and integration patterns for cloud environments.

#LI-JP1

Responsibilities

• Contribute to all technical aspects of application development and support including reports, interfaces, database design, patching, upgrades, and enhancements. 
• Participate in SAP security design, development, implementation, audit and provisioning across various SAP environments through existing SAP and access management tools (IDAM). 
• Perform Identity Access Management (IAM) platform support to include implementation, administration, monitoring and troubleshooting activities in IAM platform (ex. Saviynt) Provide subject matter expertise in implementation of system/role/user/process compliance controls using SAP Standard tools and documentation. 
• Lead integration efforts between the Saviynt IGA platform and other platforms and services like Active directory, SAP, Azure, AWS etc. 
• Provides technical expertise in implementation and production support of applications including SAP and other ERP systems which may involve diverse development platforms and software/hardware technologies. Participate in system-wide updates and installing upgrades/patches for various systems. 
• Proactive in identifying, escalating, and addressing production issues within SLA deadlines, including root cause resolution follow-up while demonstrating problem-solving skills and excellent customer service. 
• Collaborates with cross-functional team members within SAP BASIS, middleware, functional and infrastructure teams.

Knowledge, Skills and Abilities

• Extensive understanding of SAP Security role/user access assignments and SAP software landscape.
• Experience in software development tools such as Git, Eclipse, Azure DevOps, Visual Studio etc.
• Experience developing and implementing cloud solutions on AWS/Azure platforms with knowledge in application containerization.
• Experience in Identity and Access Management and knowledge of RBAC, Certification, custom workflows, Plugins, application integration and support Production.
• Experience in user lifecycle management, auditing, access certification, SOD and implement leading Identity Governance (IGA- Saviynt) solution based on customer requirements. 
• Experience in IAM systems (Saviynt) with in-house applications, third party applications and SaaS applications for provisioning, identity authentication, and developing connectors between IAM tools and system resources.
• Good understanding and working experience on LDAP technologies, Active Directory (AD) including managing user security with group policies, security groups, distribution and support for problems relating to Active Directory.
• Experience in IAM security fundamentals and technologies, user lifecycle management, provisioning and reconciliation, auditing, reporting and access certification, SOD, cloud security.
• Experience in IAM to deploy, configure and implement its leading Identity Governance (IGA) solution based on customer requirements. Industry experience in development, customization, configuration, deployment of any Identity Management and Governance products (Saviynt - preferred).
• Proficiency in one or more programming (Java, JavaScript, Python, .Net, C++, etc.) API’s for integrating applications, SQL or other database technologies
• Experience with Kubernetes and Red Hat OpenShift is a plus
• Experience developing and implementing cloud solutions on AWS/Azure/ M365 platforms.
• Knowledge in report development (BI, Tableau) and data analysis is a plus.

Education, Experience and Certifications

• Bachelor's degree in an IT related discipline preferred
• 4 years of industry experience in application support, SAP Security, IAM systems, implementation and administration.
• Able to travel for meetings and project coordination as required.
• Ability to work weekends and evenings as required.

Physical Requirements

• May be required to respond SAP Security, IDAM alerts and communicate during off hours.