Sr Manager SAP Security Architect
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 10+ years
- Category
- Security
- Posted
Skills
Must have
- 10+ years of experience in enterprise IT, with a substantial track record in solution or security architecture on large, complex programs.
- Deep, hands-on security architecture experience across a SAP-centric landscape — demonstrable work securing S/4HANA and other SAP applications, and designing secure integrations between them.
- Strong command of identity and access management, including practical experience with OAuth 2.0 / OIDC and SAML 2.0, single sign-on, federation, and identity lifecycle/provisioning.
- Strong knowledge of identity management on SAP BTP (SAP Cloud Identity Services — IAS/IPS, trust, role collections, and federation), sufficient to define the architecture, standards, and guidelines fo
- Working knowledge of Microsoft Azure security services and cloud security patterns (identity, network, key/secrets management), including integration between Azure and SAP.
- Proven ability to produce security architecture artifacts (HLD/LLD/ADRs), lead threat modeling and security/risk assessments, and drive designs into production.
- Experience partnering with an enterprise or global cyber function — aligning designs to cyber and regulatory standards, and preparing for and successfully navigating cyber/security architecture review
- Demonstrated knowledge of AI and agentic AI concepts and associated security risks, with experience, training, certification, or project work involving LLMs, AI agents, SAP Joule, Claude, MCP-based in
- Experience influencing and advising senior stakeholders and delivery teams as a recognized technical authority, and leading technical teams through influence and dotted-line relationships rather than
Nice to have
- Familiarity with SAP Business Data Cloud (BDC) and SAP HANA security, and with cloud procurement/HR SaaS platforms in the portfolio (Ariba, Fieldglass, Concur, SuccessFactors).
- Hands-on experience securing production AI/agentic deployments — agent identity and authorization, prompt/output safeguards, and agent-to-agent (A2A) or MCP-based integration security.
- Relevant security certifications (e.g., CISSP, CCSP, SABSA, TOGAF) and/or Azure security certifications (e.g., AZ-500) and SAP credentials.
- Familiarity with zero-trust, OWASP, RBAC/ABAC/ReBAC authorization models, and regulatory/compliance frameworks (e.g., SOX, data-privacy regulations).
Full description
Sr Manager SAP Security Architect
Requisition ID: 6047
Country: United States
US Locations: Nashville, Hermitage, Tampa, Cincinnati, Indianapolis, Kansas City, San Antonio, St. Louis
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
Work you'll do
This role owns security architecture and design across the Enterprise Solutions portfolio. It defines how the portfolio's platforms — predominantly SAP (S/4HANA, SAP BTP, SAP Business Data Cloud, SAP HANA, Ariba, Fieldglass, Concur, and SuccessFactors), together with the Azure services and the AI and agentic platforms that increasingly surround and extend them — are designed, integrated, and operated securely. Working as a hands-on technical authority within the Enterprise Solutions Architecture team, the role establishes security patterns, identity and access designs, and control standards that every solution in the portfolio is expected to follow, and partners closely with the global cyber team to see those designs safely into production.
As the portfolio is modernized and “agentified” — embedding AI copilots and autonomous agents such as SAP Joule into core business platforms — the security expertise this role brings is central to success. Securing agentic AI (how agents authenticate, what data and actions they are authorized for, and how their behavior is governed) is the fastest-growing and highest-stakes area of the portfolio's risk surface. This role is expected to lead that agenda, not merely keep pace with it, and a genuine passion for agentic AI and its secure adoption is essential to the position.
The position is an individual-contributor architect role: it leads through technical expertise, influence, and the strength of its designs rather than through direct people management. Although the role has no direct reports, it provides dotted-line technical leadership — defining security architecture, standards, and security-related priorities for the DTECH Enterprise Solutions security team and the Basis team to implement. It does not guide these teams' day-to-day work. It is a trusted advisor to project teams, platform owners, and leadership on how to protect enterprise data and identities across a complex, multi-cloud, SAP-centric estate.
Key responsibilitiesSecurity architecture & design
- Own the end-to-end security architecture for the Enterprise Solutions portfolio — defining reference architectures, security design patterns, and control standards that apply across SAP and non-SAP platforms.
- Produce fit-for-purpose security artifacts (security architecture overviews, high- and low-level designs, and architecture decision records) and review solution designs for security risk before build and deployment.