SAP Technical Lead (Private Cloud Edition)

About the role

The SAP Technical Lead will coordinate end‑to‑end technical onboarding for SAP RISE Private Cloud Edition (PCE) on Azure. Based in Toronto, you will act as the single point of contact across SAP, internal cloud, network, IAM, security teams and service management processes.

Key responsibilities

• Own internal tickets and work‑stream plans for connectivity, identity, and operations during RISE PCE onboarding.
• Coordinate private connectivity (ExpressRoute, VPN, routing, allow‑lists, DNS forwarding, firewall/NVA requirements).
• Design and implement SSO and provisioning patterns between Microsoft Entra ID and SAP IAS/IPS (SAML/OIDC, SCIM) and align with access‑governance tools.
• Deploy SAP Cloud ALM integration, including monitoring hooks, alerting and operational processes.
• Set up SAP BTP foundation (sub‑account, global account, entitlements, destinations, security baseline).
• Lead ServiceNow ticketing and cross‑team coordination (cloud, network, IAM, security, SOC).
• Define operational handover artefacts such as runbooks, support model, monitoring, log forwarding and DR connectivity.

Required profile

• Strong delivery leadership with stakeholder management experience.
• Hands‑on or leadership experience with SAP Basis and SAP workloads on Azure.
• Familiarity with ITIL/ServiceNow processes and documentation.

Required skills

• SAP Basis
• SAP RISE Private Cloud Edition
• Azure networking (ExpressRoute, VPN, routing, Private DNS, firewall/NVA, IP planning)
• Microsoft Entra ID, Conditional Access, MFA, SAML/OIDC federation, SCIM provisioning
• SAP Cloud ALM
• SAP Business Technology Platform (BTP) setup
• ServiceNow ticketing and ITIL
• CyberArk privileged access management (nice‑to‑have)
• Security controls (TLS, encryption, logging, evidence retention)