SAP Security Consultant

SAP S/4HANA Security

Design and maintain role concepts for S/4HANA (Business Roles, Catalogs, Groups)
Perform user administration, role provisioning, and access reviews
Conduct authorization troubleshooting (SU53, STAUTHTRACE)
Support system conversions and upgrades (S/4)
Implement best-practice authorization concepts (Fiori-first, business role-based)
SAP Fiori Security
Configure and maintain Fiori catalogs, groups, spaces, and pages
Manage OData service authorizations
Integrate Fiori security with Back End S/4 authorizations
Support Fiori launchpad security and performance issues
SAP GRC (Access Control)

Implement and support GRC AC modules:
o Access Risk Analysis (ARA)
o Access Request Management (ARM)
o Emergency Access Management (EAM/Firefighter)
o Business Role Management (BRM)
Maintain SoD rule sets, mitigating controls, and workflows
Support audit and compliance requirements (SOX, GDPR, internal audits)
Coordinate with auditors and compliance teams
Configure GRC for SuccessFactors and ARIBA systems
SAP BTP Security
Configure BTP security architecture (Global Account, Subaccounts)
Manage Role Collections, authorization assignments, and trust configurations
Integrate BTP with IAS/IPS and corporate IdPs (Azure AD, etc.)
Secure BTP services (CAP, Integration Suite, Workflow, BAS)
Support secure integration between S/4HANA and BTP applications
Identity & Access Management
Integrate SAP systems with SSO, SAML, OAuth 2.0
Support Identity life cycle management
Enforce least-privilege and zero-trust security principles
Operations & Support
Provide L3 security support
Perform regular access reviews and cleanups activities
Document security designs,SOPs, and controls
Support cutovers, change transport management, and production go-lives

Required Skills & Experience
Technical Skills
Strong experience in SAP Security (ECC and S/4HANA)
Hands-on expertise with SAP Fiori authorization concepts
Solid working knowledge of SAP GRC Access Control
Experience with SAP BTP security and cloud IAM
Strong knowledge of authorization objects, roles, profiles
Familiarity with SAP Basis and integration concepts
Functional & Compliance Knowledge
Understanding of SoD, audit controls, and compliance frameworks
Experience working with internal/external auditors
Ability to translate business requirements into secure role designs
Experience in SAP BDC, Datasphere, SAP Analytics Cloud and SAP SuccessFactors are desired.