SAP Security Architect Manager (m/f/d)
Offer summary

(Summary generated by AI based on the full job description)

The project focuses on security and access management in SAP BTP, primarily in Security, Identity Management, and Access Governance. Key technologies include SAP BTP (Neo and Cloud Foundry), IAS, IPS, IAG, OAuth2, SAML, XSUAA and integrations with Azure AD, Okta, Keycloak. Responsibilities involve designing and maintaining security architecture, managing roles and access, implementing compliance policies, automating processes, supporting audits, and delivering training. The role requires experience in SAP Security and close collaboration with technical and business teams.

new

SAP Security Architect Manager (m/f/d)

Company: JTI GBS POLAND Sp. z o.o.

from: 11 August 2026
to: 10 September 2026
salary not specifiedcontract of employment (full-time)
Offer parameters
level:senior
working mode:hybrid
Warszawa, Wola
Warszawa, WolaŻelazna 51/53View on map

Requirements

Expected technologies

SAP

Our requirements

  • Technical Expertise:
  • 5+ years of experience in SAP Security and Identity Management
  • 3+ years hands-on experience with SAP BTP (Neo & Cloud Foundry environments)
  • strong understanding of SAP Cloud Identity Services (IAS, IPS) and SAP Identity Access Governance (IAG)
  • experience configuring trust relationships, OAuth2, SAML, and XSUAA authorizations
  • knowledge of BTP cockpit administration, subaccount hierarchy, and entitlement management
  • Preferred Skills:
  • Experience integrating SAP BTP with Azure AD or Okta, or Keycloak
  • Familiarity with SAP Cloud ALM, Security Monitoring, and Audit Log API
  • Exposure to BTP services such as CAP, BAS, Workflow Management, or Integration Suite
  • Knowledge SAP GRC Access control or Cybersecurity frameworks (ISO 27001, NIST2,…)
  • Soft Skills:
  • Strong communication and documentation abilities
  • Comfortable leading workshops and security design sessions
  • Analytical mindset with a proactive approach to risk management

Your responsibilities

  • BTP Security Architecture & Strategy:
  • Design and maintain the BTP security architecture, including subaccount structure, trust configuration, and connectivity to Identity Providers (IdPs)
  • Define and document security standards and governance models for multi-tenant SAP cloud environments
  • Implement and optimize Identity Authentication (IAS) and Identity Provisioning (IPS) services
  • Access & Role Management:
  • Design and maintain a sustainable BTP to facilitate maintenance of authorizations in the JTI SAP BTP landscape. (develop and maintain role-based access control (RBAC) and attribute-based access control (ABAC) model)
  • Act as interface between the different stakeholders (Business, IT, Compliance/Legal teams) to ensure alignment on the access design and the implementation plan
  • Manage SAP Cloud security parameters and access, including administrators, developers, and integration users
  • Coordinate with compliance teams to ensure adherence to SoD (Segregation of Duties) principles.
  • Look for improvement opportunities via automation of internal processes or leveraging existing system functionality
  • Manage and transfer knowledge by designing training materials, training SAP security staff and other stakeholders
  • Support integration with Identity and Access Management solutions (Identity IIQ/SailPoint preferred)
  • Governance & Compliance:
  • Define and implement SAP cloud security and Access Governance policies, procedures, and standards in alignment with enterprise IT security frameworks
  • Design and implement new controls ensuring SAP BTP and cloud systems remain available, transactional integrity is guaranteed, data sensitivity and confidentiality requirements are met, and risks are considered
  • Support audit activities by providing documentation, logs, and risk assessments
  • Implement security monitoring and reporting using Security Bridge, SAP Cloud ALM, Audit Logs, and Security Analytics tools
  • Integration & Automation:
  • Integrate SAP BTP with SAP Identity Access Governance (IAG), SAP Cloud Identity, and on-premises SAP systems (S/4HANA, BW/4HANA, etc.)
  • Automate user lifecycle management and access provisioning through APIs and scripting
  • Collaborate with DevOps teams to embed security into CI/CD pipelines
  • Advisory & Enablement:
  • Provide expert advice on BTP security topics to project teams and business stakeholders
  • Deliver training sessions and internal knowledge transfer on BTP access management
Company

About the project

In this role, you will be designing and maintaining access model and governance related business processes based on information from stakeholders and identified needs. You will design and implement controls, manage partners/vendors, ensure stakeholders’ satisfaction, and promote an information security culture driven by risk considerations.
We are seeking an SAP Business Technology Platform (BTP) Manager with deep specialization in Security, Identity Management, and Access Governance to join our Identity and Access Governance team. The ideal candidate will be responsible for defining, implementing, and maintaining secure access models across our SAP BTP (mainly) and rest of SAP cloud landscapes, ensuring alignment with corporate compliance and SAP best practices.
You will collaborate closely with SAP Basis, IT Security, Functional (BTS) and Internal Controls teams to establish governance frameworks, role-based permissions, and integrations with SAP Cloud Identity Services.

Benefits

  • sharing the costs of sports activities
  • private medical care
  • sharing the costs of professional training & courses
  • life insurance
  • remote work opportunities
  • flexible working time
  • fruits
  • integration events
  • corporate sports team
  • retirement pension plan
  • saving & investment scheme
  • corporate credit card
  • corporate library
  • no dress code
  • video games at work
  • coffee / tea
  • drinks
  • parking space for employees
  • leisure zone
  • extra social benefits
  • sharing the costs of holidays for kids
  • employee referral program
  • charity initiatives
  • JTI Benefit Platform
  • Free beverages, snacks, fruit, sandwiches, and popcorn
  • Employee Assistance Program (EAP)
  • Employee Share Purchase Plan
  • 20 weeks of paid family leave for new parents
  • Anniversary Award Program
  • Quick Reward Program

JTI GBS POLAND Sp. z o.o.

JTI Poland is part of Japan Tobacco International, a leading international tobacco company. We operate in 130 countries, employ over 45,000 people worldwide and our product portfolio includes world-renowned brands such as Camel, LD, Winston and Logic, available on the Polish market.
In Poland, we employ over 2,300 employees and we are the 3rd player in the tobacco industry. Since the beginning of JTI’s operations in Poland in 2007, we have been the fastest growing tobacco company: our market share has more than quadrupled and our production volume has grown more than 10 times.
But our business, isn’t just business. Our business is our people. Their talent. Their potential. We believe when they’re free to be themselves, grow, travel and develop, amazing things can happen for our business. That’s why since 11 years JTI is one of the Top Employers in Poland, in 2020 being ranked number one for the second year in a row.
SAP Security Architect Manager (m/f/d)
I apply to:
JTI GBS POLAND Sp. z o.o.
Warszawa, Wola
Pracodawca zbiera zgłoszenia przez swój system.
Przejdziesz na zewnętrzny formularz.

By clicking "Aplikuj" you confirm that you've read and accepted our Terms and Conditions.



This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Need more information?

  • Make sure the body of the offer doesn’t already include what you’re looking for.
  • Ask a question if you need more information you’re interested in.
  • We’ll forward your question to the employer and aim to provide a response within 3 business days.

Share this offer