Identity & Access Management Architect (SAP & Microsoft ecosystem)

Job Description: Identity & Access Management Architect (SAP & Microsoft ecosystem) (m/f/d)

About the Role

As an IAM Architect, you are responsible for the company-wide identity and access architecture, with SAP as the central backbone, integrated with Microsoft AD / Entra ID and data platforms.

You design a secure, scalable, and compliance-driven IAM landscape – strategically, across systems, and in close alignment with senior management.

The role is not focused on operational execution, but on architecture, governance, and strategic decision-making.

Your Responsibilities

IAM Architecture & Strategy

• Ownership and continuous development of the enterprise-wide IAM target architecture
• Definition of architectural principles, standards, and guidelines for:
  • Identity
  • Authentication
  • Authorization
• Development of SAP-centered IAM concepts aligned with security and compliance requirements

SAP as IAM Backbone

• Architecture of identity and role concepts across complex SAP landscapes (e.g. S/4HANA, BTP, SuccessFactors)
• Ensuring consistent user lifecycle management (Joiner / Mover / Leaver)
• Governance of role and authorization models in close alignment with business processes

Microsoft Identity Integration

• Architecture and governance of Microsoft AD / Entra ID as central identity providers
• Design of secure integration patterns between SAP and Microsoft Identity Services:
  • Single Sign-On (SSO)
  • Federation
  • Provisioning
• Harmonization of Conditional Access, authentication, and role assignments across platforms

Data & Platform Integration

• Definition of IAM standards for data platforms and non-SAP applications
• Ensuring consistent identity and authorization models across all systems
• Supporting data governance through well-designed access concepts

Governance, Security & Compliance

• Acting as the architectural authority for IAM-related decisions
• Reviewing solution designs from internal teams and external partners
• Ensuring compliance with:
  • Security policies
  • Audit requirements
  • Regulatory standards

Strategic Interface Role

• Translating business and compliance requirements into scalable IAM architectures
• Close collaboration with:
  • Cybersecurity
  • SAP teams
  • Data & Analytics
  • IT management
  • External partners
• Supporting strategic initiatives such as:
  • S/4HANA transformations
  • Cloud migrations
  • M&A activities
  • Platform modernization

Your Profile

Professional Qualifications

• Several years of experience in IAM architecture within complex enterprise environments
• Deep expertise in:
  • SAP authorization concepts
  • SAP Identity Management
• Strong knowledge of Microsoft AD / Entra ID, including:
  • Identity governance
  • Conditional Access
  • Federation
• Experience with data platforms (e.g. Databricks, Snowflake, Azure Data Lake)
• Knowledge of common IAM standards and protocols:
  • SAML
  • OAuth 2.0
  • OpenID Connect
  • SCIM
• Experience working at management and enterprise level

Personal Strengths

• Strong conceptual and analytical skills
• Ability to communicate complex topics clearly and effectively
• Structured, independent working style with high quality standards
• Very good German and English skills

Role Scope & Delineation

This position is strategic and architectural in nature.

• No operational execution or administration
• Focus on:
  • Design
  • Governance
  • Decision-making
• Implementation is carried out by specialized delivery teams