SAP Security Engineer, Ford Energy

Ford Motor Company • Dearborn, MI

2d • $65,100 - $166,200 • Hybrid

About The Position

We are seeking an SAP Security Specialist (GSR Level) with deep expertise in SAP Identity Access Governance (IAG) and public cloud SAP deployments. In this role, you will be responsible for designing, implementing, and maintaining robust security architectures and access controls across our SAP landscape, ensuring secure migration and operations of critical enterprise systems hosted in public cloud environments.

Requirements

• Minimum of 3–5 years of dedicated experience in SAP Security, including hands-on experience with SAP GRC or SAP Identity Access Governance (IAG).
• Demonstrated experience securing SAP workloads deployed in public cloud environments, including a strong understanding of cloud infrastructure security, network security groups, and IAM policies.
• Practical experience implementing and configuring SAP Cloud Identity Services (Identity Authentication / Identity Provisioning) and enterprise IAM solutions.
• Deep technical knowledge of SAP security architectures, authorization objects, role design (single, composite, and derived roles), and Segregation of Duties (SoD) analysis.
• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent related work experience.

Nice To Haves

• SAP Certified Technology Associate - SAP System Security and Authorizations, or cloud-specific security certifications.
• Hands-on experience with SAP Business Technology Platform (BTP) security configurations and RISE with SAP compliance frameworks.
• Experience in highly regulated industries such as Renewable Energy, Automotive, or manufacturing operations.
• Experience configuring SAP Enterprise Threat Detection (ETD) or integrating SAP security logs with enterprise SIEM platforms (e.g., Microsoft Sentinel, SCC, Elastic).

Responsibilities

• Design, configure, and maintain secure access controls and segregation of duties (SoD) policies using SAP Identity Access Governance (IAG) and SAP Cloud Identity Services (IAS/IPS).
• Partner with infrastructure and cloud engineering teams to secure SAP landscapes (such as SAP S/4HANA, BTP, and RISE with SAP) hosted on public cloud platforms.
• Implement and optimize user provisioning, single sign-on (SSO), multi-factor authentication (MFA), and federated identity flows between SAP systems, public clouds, and enterprise identity providers (e.g., Microsoft Entra ID).
• Conduct regular vulnerability assessments, security audits, and configuration reviews of public cloud SAP infrastructure and database layers (HANA security).
• Translate corporate cybersecurity requirements into concrete SAP security baselines, ensuring compliance with internal policies and external regulatory standards (e.g., SOC 2, ISO 27001).
• Define, build, and audit SAP business roles, authorization objects, and emergency access management (Firefighter) procedures to maintain a least-privilege security posture.
• Act as the subject matter expert for SAP-related security incidents, assisting in rapid investigation, forensic analysis, and the implementation of permanent remediation measures.
• Work closely with SAP functional teams, enterprise GRC analysts, cloud architecture teams, and external integration partners to ensure secure-by-design SAP deployments.

Benefits

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
• Paid time off and the option to purchase additional vacation time.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level