Source description
About the role
SAP Security Engineer, Ford Energy
Dearborn, MI, United States(Hybrid)
Job Description
The Opportunity
We are seeking an SAP Security Specialist (GSR Level) with deep expertise in SAP Identity Access Governance (IAG) and public cloud SAP deployments. In this role, you will be responsible for designing, implementing, and maintaining robust security architectures and access controls across our SAP landscape, ensuring secure migration and operations of critical enterprise systems hosted in public cloud environments.
Responsibilities
-
Key Responsibilities
-
SAP Cloud Security & Governance: Design, configure, and maintain secure access controls and segregation of duties (SoD) policies using SAP Identity Access Governance (IAG) and SAP Cloud Identity Services (IAS/IPS).
-
Public Cloud SAP Deployments: Partner with infrastructure and cloud engineering teams to secure SAP landscapes (such as SAP S/4HANA, BTP, and RISE with SAP) hosted on public cloud platforms.
-
Identity & Access Management (IAM): Implement and optimize user provisioning, single sign-on (SSO), multi-factor authentication (MFA), and federated identity flows between SAP systems, public clouds, and enterprise identity providers (e.g., Microsoft Entra ID).
-
Vulnerability & Compliance Monitoring: Conduct regular vulnerability assessments, security audits, and configuration reviews of public cloud SAP infrastructure and database layers (HANA security).
-
Policy & Control Enforcement: Translate corporate cybersecurity requirements into concrete SAP security baselines, ensuring compliance with internal policies and external regulatory standards (e.g., SOC 2, ISO 27001).
-
Role Design & Administration: Define, build, and audit SAP business roles, authorization objects, and emergency access management (Firefighter) procedures to maintain a least-privilege security posture.
-
Incident Support & Remediation: Act as the subject matter expert for SAP-related security incidents, assisting in rapid investigation, forensic analysis, and the implementation of permanent remediation measures.
-
Collaboration: Work closely with SAP functional teams, enterprise GRC analysts, cloud architecture teams, and external integration partners to ensure secure-by-design SAP deployments.
Qualifications
-
Position Qualifications and Key Capabilities
-
Required
-
Experience: Minimum of 3–5 years of dedicated experience in SAP Security, including hands-on experience with SAP GRC or SAP Identity Access Governance (IAG).
-
Cloud Security: Demonstrated experience securing SAP workloads deployed in public cloud environments, including a strong understanding of cloud infrastructure security, network security groups, and IAM policies.
-
Access Management Tools: Practical experience implementing and configuring SAP Cloud Identity Services (Identity Authentication / Identity Provisioning) and enterprise IAM solutions.
-
SAP Authorization Concepts: Deep technical knowledge of SAP security architectures, authorization objects, role design (single, composite, and derived roles), and Segregation of Duties (SoD) analysis.
-
Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent related work experience.
-
Preferred
-
SAP Certified Technology Associate - SAP System Security and Authorizations, or cloud-specific security certifications.
-
Hands-on experience with SAP Business Technology Platform (BTP) security configurations and RISE with SAP compliance frameworks.
-
Experience in highly regulated industries such as Renewable Energy, Automotive, or manufacturing operations.
-
Experience configuring SAP Enterprise Threat Detection (ETD) or integrating SAP security logs with enterprise SIEM platforms (e.g., Microsoft Sentinel, SCC, Elastic).
-
Leadership Attributes
-
A collaborative, detail-oriented technical expert capable of navigating complex enterprise systems and driving secure cloud modernization strategies.
-
Location & Travel
-
Location: Dearborn, MI- This position is hybrid-friendly for candidates with a proven ability to deliver results in a flexible environment.
-
Travel Expectations: Occasional travel to support suppliers, test houses, and customer sites
-
Company: As Ford establishes a wholly owned subsidiary focused on Battery Energy Storage Systems, this role will initially be employed by Ford and is expected to transition to the subsidiary within one year.
Why Ford Energy? At Ford Energy, you have the backing of an industrial manufacturing powerhouse with the agility of a dedicated energy startup offering industry-leading technology. We offer a competitive compensation package including performance-based bonuses, Ford vehicle discounts, and the opportunity to shape the energy strategy of one of the world's most iconic brands.
Apply Now
Job Info
- Job Identification67004
- Job CategoryEnterprise Technology
- Posting Date07/15/2026, 03:04 PM
- Job ScheduleFull time
- Locations21500 Oakwood Blvd, Dearborn, MI, 48124, US(Hybrid)
Similar Jobs
See More Jobs
When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences, or your device and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. You cannot opt-out of our Strictly Necessary cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). Learn more
Click to Accept All CookiesClick to Decline All Cookies
Are You Still With Us?
It seems you've been gone for a while. For security reasons we will end your session automatically in 03:00 unless you would like to continue working.
End SessionContinue Working
Work Summary
This summary is generated by AI Assist. Click inside the summary text box to make changes as necessary.
DiscardAdd Summary
Page SAP Security Engineer, Ford Energy - Ford Global Career Site Careers loaded
More at Ford Motor Company
Related open roles
Director, Business Information Security Officer
United States · Hybrid
Senior IT Security & Compliance Analyst
Köln · Hybrid
Manager Architecture and Information Security, BlueOval Battery Park Michigan
Remote · United States
Privacy Analyst, Incident Response
Detroit · Hybrid
Mfg Platform OT Cyber Security Engineer
United States · Hybrid
Battery Monitoring Cyber Security Engineer, Ford Energy
Detroit · Hybrid