In this position...
We are seeking an SAP Security Specialist (GSR Level) with deep expertise in SAP Identity Access Governance (IAG) and public cloud SAP deployments. In this role, you will be responsible for designing, implementing, and maintaining robust security architectures and access controls across our SAP landscape, ensuring secure migration and operations of critical enterprise systems hosted in public cloud environments.
What you'll do...
Key Responsibilities
- SAP Cloud Security & Governance: Design, configure, and maintain secure access controls and segregation of duties (SoD) policies using SAP Identity Access Governance (IAG) and SAP Cloud Identity Services (IAS/IPS).
- Public Cloud SAP Deployments: Partner with infrastructure and cloud engineering teams to secure SAP landscapes (such as SAP S/4HANA, BTP, and RISE with SAP) hosted on public cloud platforms.
- Identity & Access Management (IAM): Implement and optimize user provisioning, single sign-on (SSO), multi-factor authentication (MFA), and federated identity flows between SAP systems, public clouds, and enterprise identity providers (e.g., Microsoft Entra ID).
- Vulnerability & Compliance Monitoring: Conduct regular vulnerability assessments, security audits, and configuration reviews of public cloud SAP infrastructure and database layers (HANA security).
- Policy & Control Enforcement: Translate corporate cybersecurity requirements into concrete SAP security baselines, ensuring compliance with internal policies and external regulatory standards (e.g., SOC 2, ISO 27001).
- Role Design & Administration: Define, build, and audit SAP business roles, authorization objects, and emergency access management (Firefighter) procedures to maintain a least-privilege security posture.
- Incident Support & Remediation: Act as the subject matter expert for SAP-related security incidents, assisting in rapid investigation, forensic analysis, and the implementation of permanent remediation measures.
- Collaboration: Work closely with SAP functional teams, enterprise GRC analysts, cloud architecture teams, and external integration partners to ensure secure-by-design SAP deployments.
You'll have...
Required
- Experience: Minimum of 3–5 years of dedicated experience in SAP Security, including hands-on experience with SAP GRC or SAP Identity Access Governance (IAG).
- Cloud Security: Demonstrated experience securing SAP workloads deployed in public cloud environments, including a strong understanding of cloud infrastructure security, network security groups, and IAM policies.
- Access Management Tools: Practical experience implementing and configuring SAP Cloud Identity Services (Identity Authentication / Identity Provisioning) and enterprise IAM solutions.
- SAP Authorization Concepts: Deep technical knowledge of SAP security architectures, authorization objects, role design (single, composite, and derived roles), and Segregation of Duties (SoD) analysis.
- Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent related work experience.
Even better, you may have...
Preferred
- SAP Certified Technology Associate - SAP System Security and Authorizations, or cloud-specific security certifications.
- Hands-on experience with SAP Business Technology Platform (BTP) security configurations and RISE with SAP compliance frameworks.
- Experience in highly regulated industries such as Renewable Energy, Automotive, or manufacturing operations.
- Experience configuring SAP Enterprise Threat Detection (ETD) or integrating SAP security logs with enterprise SIEM platforms (e.g., Microsoft Sentinel, SCC, Elastic).
Leadership Attributes
- A collaborative, detail-oriented technical expert capable of navigating complex enterprise systems and driving secure cloud modernization strategies.
Location & Travel
- Location: Dearborn, MI- This position is hybrid-friendly for candidates with a proven ability to deliver results in a flexible environment.
- Travel Expectations: Occasional travel to support suppliers, test houses, and customer sites
You may not check every box, or your experience may look a little different from what we've outlined, but if you think you can bring value to Ford Motor Company, we encourage you to apply!
As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including:
- Immediate medical, dental, vision and prescription drug coverage
- Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
- Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
- Vehicle discount program for employees and family members and management leases
- Tuition assistance
- Established and active employee resource groups
- Paid time off for individual and team community service
- A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
- Paid time off and the option to purchase additional vacation time.
This position is a salary grade 5 – 8 and ranges from $65,100-$166,200.
Final determination of salary grade will be based on candidate's skills and experience, and base salary will be set within the applicable range according to job scope, responsibility and competitive market value.
For more information on salary and benefits, click here: https://fordcareers.co/GSR
Visa sponsorship is not available for this position.
Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.
We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.
This position is hybrid. Candidates who are in commuting distance to a Ford hub location may be required to be onsite four or more days per week. #LI-Hybrid
Company: As Ford establishes a wholly owned subsidiary focused on Battery Energy Storage Systems, this role will initially be employed by Ford and is expected to transition to the subsidiary within one year.
#LI-KF2
#FordEnergy
Skills Required
- 3-5 years of dedicated SAP Security experience
- Hands-on experience with SAP GRC or SAP Identity Access Governance (IAG)
- Experience securing SAP workloads deployed in public cloud environments
- Understanding of cloud infrastructure security, network security groups, and IAM policies
- Experience implementing and configuring SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning
- Experience with enterprise IAM solutions
- Technical knowledge of SAP security architectures, authorization objects, role design, and segregation-of-duties analysis
- Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related technical field, or equivalent experience
- SAP Certified Technology Associate certification in SAP System Security and Authorizations or cloud-specific security certification
- Hands-on experience with SAP BTP security configurations and RISE with SAP compliance frameworks
- Experience in renewable energy, automotive, or manufacturing operations
- Experience configuring SAP Enterprise Threat Detection or integrating SAP security logs with enterprise SIEM platforms such as Microsoft Sentinel, SCC, or Elastic
Ford Motor Company Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Ford Motor Company and has not been reviewed or approved by Ford Motor Company.
-
Healthcare Strength — Medical, dental, and vision coverage start on day one with options that include zero-premium plans, free mental health support, and wellness resources. For represented hourly employees, health plans are described as low-cost with strong coverage value.
-
Retirement Support — A 401(k) with company match and additional company contributions is available from day one, alongside life and disability coverage. Pension eligibility in certain situations and financial-planning support reinforce long‑term security.
-
Parental & Family Support — Paid parental leave, fertility, surrogacy, and adoption benefits, plus a ramp‑up program for returning parents, reflect a family‑focused package. Flexible Family Care days and generous time‑off options help address short‑term caregiving and personal needs.
Ford Motor Company Insights
What We Do
Ford is a global company with shared ideals and a deep sense of family. From our earliest days as a pioneer of modern transportation, we have sought to make the world a better place – one that benefits lives, communities and the planet. We are here to provide the means for every person to move and pursue their dreams, serving as a bridge between personal freedom and the future of mobility. In that pursuit, our 186,000 employees around the world help to set the pace of innovation every day.
