SAP Security Consultant

SAP S/4HANA Security

• Design and maintain role concepts for S/4HANA (Business Roles, Catalogs, Groups)
• Perform user administration, role provisioning, and access reviews
• Conduct authorization troubleshooting (SU53, STAUTHTRACE)
• Support system conversions and upgrades (S/4)
• Implement best-practice authorization concepts (Fiori-first, business role-based)

SAP Fiori Security

• Configure and maintain Fiori catalogs, groups, spaces, and pages
• Manage OData service authorizations
• Integrate Fiori security with Back End S/4 authorizations
• Support Fiori launchpad security and performance issues

SAP GRC (Access Control)

• Implement and support GRC AC modules:
  • Access Risk Analysis (ARA)
  • Access Request Management (ARM)
  • Emergency Access Management (EAM/Firefighter)
  • Business Role Management (BRM)
• Maintain SoD rule sets, mitigating controls, and workflows
• Support audit and compliance requirements (SOX, GDPR, internal audits)
• Coordinate with auditors and compliance teams
• Configure GRC for SuccessFactors and ARIBA systems

SAP BTP Security

• Configure BTP security architecture (Global Account, Subaccounts)
• Manage Role Collections, authorization assignments, and trust configurations
• Integrate BTP with IAS/IPS and corporate IdPs (Azure AD, etc.)
• Secure BTP services (CAP, Integration Suite, Workflow, BAS)
• Support secure integration between S/4HANA and BTP applications

Identity & Access Management

• Integrate SAP systems with SSO, SAML, OAuth 2.0
• Support Identity life cycle management
• Enforce least-privilege and zero-trust security principles

Operations & Support

• Provide L3 security support
• Perform regular access reviews and cleanups activities
• Document security designs,SOPs, and controls
• Support cutovers, change transport management, and production go-lives

Required Skills & Experience

Technical Skills

• Strong experience in SAP Security (ECC and S/4HANA)
• Hands-on expertise with SAP Fiori authorization concepts
• Solid working knowledge of SAP GRC Access Control
• Experience with SAP BTP security and cloud IAM
• Strong knowledge of authorization objects, roles, profiles
• Familiarity with SAP Basis and integration concepts

Functional & Compliance Knowledge

• Understanding of SoD, audit controls, and compliance frameworks
• Experience working with internal/external auditors
• Ability to translate business requirements into secure role designs

Experience in SAP BDC, Datasphere, SAP Analytics Cloud and SAP SuccessFactors are desired.