SAP Technical Lead – Hybrid (Toronto)

About the role

The SAP Technical Lead will coordinate end‑to‑end technical onboarding for SAP RISE Private Cloud Edition (PCE) on Azure. Based in Toronto with a hybrid work model, you will act as the single technical point of contact across SAP, internal cloud, network, IAM, security teams, system integrators and ServiceNow/ITIL processes.

Key responsibilities

• Own internal tickets and work‑stream plans for RISE PCE technical onboarding (connectivity, identity, operations).
• Coordinate private connectivity – ExpressRoute changes, routing, allow‑lists, DNS forwarding, firewall and inspection requirements.
• Drive SSO and provisioning patterns between Microsoft Entra ID and SAP IAS/IPS (SAML/OIDC, SCIM) and align with access‑governance tools.
• Stand up SAP Cloud ALM integration, including monitoring hooks, alerting and operational processes.
• Establish SAP BTP foundation – sub‑account/global account setup, entitlements, destinations, connectivity patterns and security baseline.
• Lead ServiceNow ticketing and cross‑team coordination (cloud, network, IAM, security, SOC).
• Define operational handover artefacts – runbooks, support model, monitoring/log forwarding and DR connectivity readiness.

Required profile

• Hands‑on or strong delivery leadership experience with SAP Basis and SAP workloads on Azure.
• Deep knowledge of SAP RISE PCE connectivity patterns and private‑access constraints.
• Proven ability to manage stakeholders, follow ITIL/ServiceNow processes and produce clear documentation.
• Experience with security and identity concepts such as Conditional Access, MFA, and privileged‑access management.

Required skills

• SAP Basis
• SAP workloads on Microsoft Azure
• SAP RISE Private Cloud Edition
• ExpressRoute, VPN, routing, Private DNS, firewall/NVA, IP planning
• Microsoft Entra ID, Conditional Access, MFA, SAML, OIDC, SCIM
• SAP Cloud ALM
• SAP Business Technology Platform (BTP)
• ServiceNow and ITIL
• SAP Web Dispatcher, Fiori access patterns, reverse proxy concepts (nice‑to‑have)
• CyberArk PAM integration (nice‑to‑have)
• Security controls: TLS, encryption, logging, evidence retention (nice‑to‑have)