Position: SAP Security Consultant – Data Encryption & KMS
Employment Type: Full-Time
Location: Remote
Experience: 5+ Years (Preferred)
Job Summary
We are looking for an experienced SAP Security Consultant with strong expertise in SAP RISE environments, data-at-rest encryption, and AWS Key Management Services (KMS). The ideal candidate should have hands-on experience implementing and managing HYOK (Hold Your Own Key) and BYOK (Bring Your Own Key) encryption models within SAP landscapes. Experience with SAP Data Custodian, SAP KMS, and identity governance integrations is highly desirable.
Key Responsibilities
- Design, implement, and manage data-at-rest encryption solutions within SAP RISE environments.
- Configure and administer AWS KMS for secure key lifecycle management.
- Implement and support HYOK and BYOK encryption scenarios to meet customer security and compliance requirements.
- Work with SAP Data Custodian and SAP KMS to ensure secure key storage, management, and governance.
- Collaborate with SAP Basis, Security, Cloud, and Infrastructure teams to implement encryption and security best practices.
- Perform security assessments and ensure compliance with organizational and regulatory requirements.
- Manage encryption key rotation, backup, recovery, and auditing processes.
- Support cloud security architecture reviews and risk mitigation activities.
- Create and maintain technical documentation, security procedures, and operational runbooks.
- Troubleshoot and resolve security-related issues across SAP and cloud environments.
Required Skills
- Strong experience with SAP Security and SAP RISE platforms.
- Hands-on experience with Data-at-Rest Encryption implementation.
- Expertise in AWS Key Management Service (KMS).
- Experience implementing and supporting HYOK (Hold Your Own Key) and BYOK (Bring Your Own Key) models.
- Working knowledge of SAP Data Custodian.
- Experience with SAP KMS (Key Management Services).
- Understanding of cloud security principles and encryption frameworks.
- Knowledge of security compliance, governance, and audit requirements.
- Strong troubleshooting and stakeholder management skills.
Good to Have
- Experience with SailPoint IdentityIQ (IIQ) integration.
- Experience with Identity and Access Management (IAM) solutions.
- Knowledge of SAP GRC and SAP Identity Management.
- Exposure to AWS cloud security services and architecture.
Preferred Qualifications
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
- Relevant SAP Security, AWS Security, or Cloud Security certifications are preferred.
- Experience working in enterprise-scale SAP cloud environments.
Pay: Up to ₹1,732,804.43 per year
Work Location: Remote
