LEAD CONSULTANT

About Atos Group

Atos Group is a global leader in digital transformation with c. 63,000 employees and annual revenue of c. €8 billion, operating in 61 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE is listed on Euronext Paris.

The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

Key Responsibilities:

•  Take full ownership of SAP BTP administration tasks
• Act as design authority for Identity & SSO configuration for SAP Cloud solutions and BTP tenants
• Provide technical guidance on modern cloud architecture and design multi tenancy architecture
•  Able to act as design lead, not just executor Mandatory Skill Profile
• Senior SAP consultant having administration/ Basis background
• Hands on experience with: o SAP IAS o SAP SSO (SAML & OIDC) o SAP authentication & authorization flows
•  Proven SAP ↔ Microsoft Entra ID integration
• Experience in regulated / GxP SAP landscapes
• Hands-on expertise with SAP Cloud Connector installation, configuration, and High Availability setup
• Deep knowledge of Principal Propagation and Destination management for hybrid cloud connectivity
•  Expertise in SAP BTP Security, including Role Collections, Trust Configuration, and Shadow User management
•  Working knowledge of SAP BTP CLI and APIs for administrative automation Required

Skills:

• Configure SAP Identity Authentication Service (IAS) with Microsoft Entra ID as OIDC Identity Provider o
• Establish and validate: § OIDC client registration § Endpoints § Certificates / secrets o Define and implement immutable user identifier across SAP systems  
• Configure IAS attribute / claim mappings to support: § SAP IAG group & role based authorization
•   Audit and compliance (GxP) o Lead SAML → OIDC transition from SAP Basis side for: § SAP S/ BTP § SAP Analytics Cloud (SAC) o Align NameID, token attributes
•  sesion 4HANA § SAP handling o Configure and validate: § MFA delegation (Entra vs IAS) § Session timeouts § SAP logging & audit trails o Monitor provisioning / sync jobs o Validate solution in regulated (GxP) SAP environments o Produce Basis oriented documentation and support handover to: § AMS Basis team § Enfo (for Entra ID side)

• Proficiency in SAP BTP account administration, including Global Account, Directory, and Subaccount management

• Experience managing BTP Entitlements, Quotas, and Service Assignments across environments

• Provision of new services, licensing model and use of costs estimator

• Produce detailed architecture documentation for BTP landscape design and SSO with Cloud Solutions

Nice to Have

• SAP Certified Associate – SAP BTP Administrator
• Experience with SAP Cloud ALM for landscape monitoring and operations
• Knowledge of BTP Resource Consumption Monitoring and Cost Center attribution
• Familiarity with Content Agent service for BTP transport management