SAP Security Architect

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

We are looking for a highly experienced SAP Security Architect with a strong background in consultancy and enterprise architecture to lead the design and implementation of secure SAP environments across a complex, global infrastructure. This role is ideal for a hands-on architect who excels at advising clients or internal stakeholders, shaping technical strategy, and delivering scalable, secure SAP infrastructure designs.

As a key member of the architecture and security teams, you will provide expert consultancy on SAP security best practices, infrastructure design, and integration within large enterprise environments. You will play a critical role in aligning security architecture with business objectives, advising on transformational projects such as SAP S/4HANA migrations, cloud integrations, and hybrid deployments.

This is a technically strategic and client-facing role, suited to someone with a deep understanding of SAP system architecture, infrastructure design principles, and enterprise-scale implementations.

Why Join Us?

At Kyndryl, your role as an SAP Security Architect is more than a job - it's a platform to lead, innovate, and shape the future of secure enterprise infrastructure. Whether you're advising on SAP in the cloud or architecting secure global SAP landscapes, we offer unmatched opportunities for growth, certification, and cutting-edge project experience.

Key Responsibilities

Security Architecture & Infrastructure Design

• Design and implement enterprise-wide SAP security architecture across platforms including S/4HANA, ECC, BW/4HANA, Fiori, and SAP BTP.
• Define secure infrastructure blueprints for on-premise, cloud, and hybrid SAP deployments, ensuring alignment with broader enterprise architecture.
• Build and maintain scalable role and authorization models (RBAC), access control frameworks, and secure connectivity between SAP components and third-party systems.
• Provide technical leadership on network, OS, database, and middleware security as they relate to SAP landscapes.

• Act as a trusted advisor to project stakeholders, offering expert guidance on security architecture, infrastructure design, and integration strategies.
• Engage with cross-functional teams to define security requirements for large-scale SAP transformation projects (e.g., cloud migration, carve-outs, upgrades).
• Translate complex technical requirements into actionable architecture roadmaps and implementation plans.
• Lead architectural reviews and provide expert insight during RFPs, design workshops, and strategy sessions.

• Define and implement technical security controls across SAP infrastructure, including firewalls, proxies, reverse proxies, SSO, identity federation, and encryption.
• Collaborate with enterprise security, IAM, and infrastructure teams to integrate SAP into the broader IT ecosystem and monitoring infrastructure.
• Partner with DevOps, Basis, and Cloud teams to embed security into CI/CD pipelines and infrastructure as code for SAP deployments.

• Develop architecture standards, patterns, and reusable frameworks to enforce consistency and reduce security risk across SAP environments.
• Create and maintain technical documentation, architectural diagrams, and interface specifications.
• Provide technical input for internal and external audits related to infrastructure security posture (GRC frameworks).

• Minimum of 10 years of experience in security architecture design and implementation within a Service Provider organization
• 7+ years of experience in SAP security and architecture, including multiple SAP modules and technologies.
• Extensive experience as an SAP Security Architect, preferably in a consulting or advisory role with large enterprises or service providers.
• Proven track record designing secure SAP landscapes across on-premise and cloud (AWS, Azure, GCP) environments.
• Strong knowledge of SAP technical architecture, including Basis, transport systems, and system interfaces.
• Deep understanding of infrastructure components (e.g., networks, firewalls, load balancers, authentication mechanisms) and how they integrate with SAP systems.
• Familiarity with access control mechanisms, SAP authorizations, and identity federation technologies (e.g., SAML, OAuth, LDAP, Azure AD).
• Experience leading or advising on SAP transformation initiatives, including cloud migration, S/4HANA conversion, or multi-system consolidation.

• Experience working with clients in regulated industries (finance, healthcare, manufacturing) on infrastructure and security strategy.
• SAP certifications in Security, Basis, or Cloud Architecture.
• Background in enterprise or solution architecture frameworks (e.g., TOGAF, SABSA) is a plus.
• Understanding of GRC tools is important but not the primary focus of this role.