Tata Consultancy Services
SAP IAG IAM Consultant
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
If you need support in completing the application or if you require a different format of this document, please get in touch with UKI.recruitment@tcs.com or call TCS London Office number 02031552100 / +44 204 520 2575 with the subject line: “Application Support Request”.
Role: SAP IAG IAM Consultant
Job Type: Permanent
Location: UK
Mode of Working: Hybrid
Number of hours: 40 hours per week – full time
Are you passionate about SAP Technologies? We have an exciting role for you – SAP IAG IAM Consultant
Careers at TCS
It means more
TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.
- Work on complex SAP developments within automotive and manufacturing environments.
- Build deep technical expertise while contributing to enterprise-scale transformation programs.
- Grow your SAP career within a global organization offering long-term opportunities.
Your Responsibilities
Identity & Access Governance Implementation
- Implement and configure SAP IAG modules using Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Role Design & Provisioning (RDP)
- Support deployment across SAP S/4HANA, ECC, and cloud applications.
Access Risk & Compliance Management
- Perform Segregation of Duties (SoD) risk analysis.
- Identify and mitigate: Critical access risks, Compliance violations
- Define and maintain: Risk rulesets, Mitigation controls
User Access & Role Management
- Design and maintain: Business roles and technical roles, Role hierarchies and authorizations
- Manage: User provisioning and de-provisioning, Access requests and approvals workflows
Integration & System Connectivity
- Integrate SAP IAG with: SAP IAS (Identity Authentication Service), SAP IPS (Identity Provisioning Service), SAP GRC systems (if hybrid landscape), Non-SAP systems (via connectors/APIs e.g. SailPoint)
- Configure: Cloud connectors, Identity federation
Workflow & Process Configuration
- Configure access request workflows: Multi-level approval processes, Risk-based approvals
- Customize: Business rules, Notification mechanisms
Testing & Deployment
- Perform: Unit testing, integration testing, UAT support
- Manage: Transport of configurations, Production deployments
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Documentation & Governance
- Maintain: Functional and technical documentation, Access governance policies
- Define standards for: Role naming conventions, Access control practices
Your Profile
Essential skills/knowledge/experience:
- Strong hands-on experience with SAP IAG modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Role Design & Provisioning (RDP)
- Deep understanding of: SAP authorization concepts (roles, profiles, objects), User administration and access control
- Experience with SAP S/4HANA / ECC security
- Segregation of Duties (SoD) & Risk Management experience in rule set configuration and maintenance, Risk identification and mitigation strategies, Compliance frameworks (SOX, audit controls)
- Identity & Access Management Concepts including User lifecycle management (joiner-mover-leaver), Role-based access control (RBAC)
- Hands-on experience with SAP IAS (Identity Authentication Service), SAP IPS (Identity Provisioning Service)
- Integration of SAP IAG with SAP applications and cloud systems
- Workflow & Access Request Configuration using Multi-stage approval workflows, Risk-based access request processes, Customize access provisioning workflows
- Soft Skills including Strong problem-solving and analytical skills, Communication with business & tech stakeholders, Agile/Scrum experience
Desirable skills/knowledge/experience:
- Experience with advanced SAP Landscapes e.g. Hybrid landscapes (SAP GRC + IAG), Multi-system environments
- Basic knowledge of Technical & Development Exposure e.g. ABAP, SAP Fiori/UI5, Familiarity with APIs and automation
- Non-SAP System Integration e.g. Experience integrating IAG with Third-party IAM tools (SailPoint), Cloud applications
- Knowledge of compliance & Governance Expertise Regulatory standards (SOX, GDPR, ISO27001), Experience in audit handling and governance frameworks
- SAP Certifications (Preferred): SAP Security / SAP IAG / SAP GRC or Related certifications: CISA, CISSP (nice to have)
Rewards & Benefits
TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network.
- We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon.
- Diversity, Inclusion and Wellbeing Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998.
- We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.
- As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at UKI.recruitment@tcs.com if you would like to opt in.
- If you are an applicant who needs any adjustments to the application process or interview, please contact us at UKI.recruitment@tcs.com with the subject line: “Adjustment Request” or call TCS London Office 02031552100 / +44 204 520 2575 to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Next Steps: Application Process
- Online application: You can apply directly through LinkedIn/ by uploading your CV. In case you wish to submit your application via another format like audio/video, please, contact - UKI.recruitment@tcs.com
- Skill-Based discussion: This will be a level 1 interview with the project team, it can be via video or in-person. Details will be confirmed by your recruiter.
- Managerial discussion: This discussion will focus on behavioral aspects and person-organization fit.
- HR Discussion: This will be with one of the members of the HR team and will cover your career journey, aspirations for growth, compensation and any other questions you may have.
Beware of Fraudulent offers
This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorized any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to UKI.recruitment@tcs.com to report any fraudulent activity.
Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.
Join us and do more of what matters. Apply online now.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location