SAP SuccessFactors Infrastructure

About the Role

We are seeking a highly skilled
SAP SuccessFactors Infrastructure & Security Specialist
responsible for ensuring the readiness, integration, authentication, and compliance of SAP SuccessFactors Employee Central (EC), Employee Central Payroll (ECP), and associated SAP cloud components. This role involves hands-on configuration, technical enablement, and security compliance across IAS, IPS, BTP, CPI, and Cloud Connector environments.

Key Responsibilities
1. Infrastructure Readiness

• Coordinate with SAP and Certis teams to ensure EC and ECP systems are provisioned, accessible, and properly configured.
• Create and manage custom admin roles, including onboarding project implementation administrators within SAP SuccessFactors modules (EC, ECP, etc.).

2. Identity Authentication & Provisioning

• Configure
  SAP Identity Authentication Service (IAS)
  to manage authentication flows for SuccessFactors applications.
• Configure
  SAP Identity Provisioning Service (IPS)
  to synchronize user identities between corporate identity providers, SuccessFactors EC/ECP, and other connected systems.
• Develop and maintain
  user transformation rules
  (attribute mapping, filtering, and conditional assignments).
• Validate
  single sign-on (SSO)
  functionality for all employees and ensure smooth authentication processes.

3. Integration with Corporate Identity Provider

• Establish secure
  SAML 2.0
  trust relationships between IAS and
  Certify (in-house corporate identity provider)
  .
• Configure
  conditional authentication policies
  :
• Authenticate Australian employees via AU Certify.
• Authenticate Singapore employees via SG Certify.
• Test failover, fallback, and error-handling mechanisms to ensure consistent user access.

4. Cloud Connector Installation & Configuration

• Install and configure
  SAP Cloud Connector
  on designated production EC2 instances (Certis-provided).
• Register and validate connectivity in
  SAP BTP Integration Subaccount
  .
• Utilize monitoring tools (Ping, Tunnel Check, SAP CC Admin UI) for connectivity validation and troubleshooting.

5. Security & Compliance

• Enforce
  SAP-recommended security standards
  across IAS, IPS, EC, ECP, CPI, BTP, Cloud Connector, and CTMS environments.
• Implement:
• TLS 1.2/1.3 encryption
• Certificate management
  (expiry monitoring and auto-renewal setup)
• Role-based access control (RBAC)
  using least privilege principles
• Logging and auditing
  for key events
• Multi-factor authentication (MFA)
  where supported
• Ensure production instances and applications remain locked from unauthorized changes; manage deployments via approved change controls only.

6. Documentation & Knowledge Transfer

• Create and maintain
  technical documentation
  for configuration, integration, transformation rules, and operational procedures.
• Prepare and deliver
  runbooks
  for incident management, password/certificate renewals, and user provisioning.
• Conduct
  knowledge transfer sessions
  for operations and support teams.

Required Skills & Experience

• 5+ years of experience in
  SAP SuccessFactors
  infrastructure or integration environments.
• Strong hands-on experience with
  IAS
  ,
  IPS
  ,
  SAML 2.0
  ,
  SSO
  , and
  Cloud Connector
  .
• Deep understanding of
  security standards
  ,
  RBAC
  , and
  compliance frameworks
  .
• Experience with
  SAP BTP
  and
  CPI
  integrations.
• Familiarity with
  TLS encryption
  ,
  MFA
  , and
  certificate lifecycle management
  .
• Excellent problem-solving, documentation, and communication skills.

Preferred Qualifications

• SAP Certified in
  SuccessFactors
  ,
  Identity Authentication
  , or
  Cloud Platform Integration
  .
• Prior experience in hybrid infrastructure environments (e.g., AWS EC2, Azure).
• Knowledge of automation tools or monitoring frameworks for SAP landscapes.