SAP Security Consultant - #2190951

SAP S/4HANA Security

· Design and maintain role concepts for S/4HANA (Business Roles, Catalogs, Groups)

· Perform user administration, role provisioning, and access reviews

· Conduct authorization troubleshooting (SU53, STAUTHTRACE)

· Support system conversions and upgrades (S/4)

· Implement best-practice authorization concepts (Fiori-first, business role–based)

SAP Fiori Security

· Configure and maintain Fiori catalogs, groups, spaces, and pages

· Manage OData service authorizations

· Integrate Fiori security with backend S/4 authorizations

· Support Fiori launchpad security and performance issues

SAP GRC (Access Control)

· Implement and support GRC AC modules:

o Access Risk Analysis (ARA)

o Access Request Management (ARM)

o Emergency Access Management (EAM / Firefighter)

o Business Role Management (BRM)

· Maintain SoD rule sets, mitigating controls, and workflows

· Support audit and compliance requirements (SOX, GDPR, internal audits)

· Coordinate with auditors and compliance teams

· Configure GRC for SuccessFactors and ARIBA systems

SAP BTP Security

· Configure BTP security architecture (Global Account, Subaccounts)

· Manage Role Collections, authorization assignments, and trust configurations

· Integrate BTP with IAS / IPS and corporate IdPs (Azure AD, etc.)

· Secure BTP services (CAP, Integration Suite, Workflow, BAS)

· Support secure integration between S/4HANA and BTP applications

Identity & Access Management

· Integrate SAP systems with SSO, SAML, OAuth 2.0

· Support Identity lifecycle management

· Enforce least-privilege and zero-trust security principles

Operations & Support

· Provide L3 security support

· Perform regular access reviews and cleanups activities

· Document security designs,SOPs, and controls

· Support cutovers, change transport management, and production go-lives

---

Required Skills & Experience

Technical Skills

· Strong experience in SAP Security (ECC and S/4HANA)

· Hands-on expertise with SAP Fiori authorization concepts

· Solid working knowledge of SAP GRC Access Control

· Experience with SAP BTP security and cloud IAM

· Strong knowledge of authorization objects, roles, profiles

· Familiarity with SAP Basis and integration concepts

Functional & Compliance Knowledge

· Understanding of SoD, audit controls, and compliance frameworks

· Experience working with internal/external auditors

· Ability to translate business requirements into secure role designs

Experience in SAP BDC, Datasphere, SAP Analytics Cloud and SAP SuccessFactors are desired.