SAP S/4HANA Security Consultant

Roles and Responsibilities

• Design, develop, and maintain SAP security roles and authorization concepts across S/4HANA environments.
• Configure and manage single, composite, and derived roles, authorization objects, and organizational-level restrictions using PFCG.
• Manage user provisioning, role assignments, modifications, and deprovisioning in accordance with security policies.
• Lead security design workshops and translate business requirements into scalable authorization solutions.
• Implement and support SAP Fiori security, including catalogs, spaces, pages, launchpad authorizations, OData services, and SAP Gateway.
• Support security requirements for CDS views, embedded analytics, and other S/4HANA capabilities.
• Perform SoD assessments, identify access risks, and coordinate remediation and mitigation activities.
• Configure and support SAP GRC Access Control, including ARA, ARM, EAM, and BRM.
• Conduct periodic access reviews, role rationalization, and compliance assessments.
• Troubleshoot authorization issues using SU53, SUIM, PFCG, ST01, STAUTHTRACE, and Security Audit Logs.
• Support internal and external audits by preparing role matrices, access reports, SoD analysis, and compliance evidence.
• Collaborate with Basis, ABAP, functional, integration, and infrastructure teams to resolve complex security and authorization issues.
• Support SAP implementations, upgrades, migrations, rollouts, and S/4HANA transformation initiatives.
• Establish security standards, role naming conventions, authorization guidelines, and access control procedures.
• Evaluate new SAP technologies and ensure security requirements are incorporated into enterprise architecture and business processes.

Required Skills

• 10+ years of experience in SAP Security and Authorizations.
• Strong hands-on experience with SAP S/4HANA Security and authorization frameworks.
• Expertise in SAP ECC and S/4HANA user and role administration.
• Strong experience with PFCG, authorization objects, organizational levels, and role design.
• Hands-on experience with SAP Fiori, Launchpad, OData, SAP Gateway, and CDS authorization concepts.
• Strong experience with SAP GRC Access Control, including:
  • Access Risk Analysis (ARA)
  • Access Request Management (ARM)
  • Emergency Access Management (EAM)
  • Business Role Management (BRM)
• Strong understanding of Segregation of Duties (SoD), access governance, risk management, audit, and compliance controls.
• Experience troubleshooting authorization issues using SU53, SUIM, ST01, STAUTHTRACE, and Security Audit Logs.
• Experience supporting SAP implementation, rollout, upgrade, migration, or transformation programs.
• Strong communication, analytical, problem-solving, and stakeholder management skills.

Preferred Skills

• SAP BTP Security
• SAP IAS, IPS, and Cloud Identity Services
• SAP MDG Security
• SAP Ariba Security
• SAP SuccessFactors Security
• SAP BW/4HANA Security
• SAP Analytics Cloud (SAC) Security
• SAP Solution Manager and ChaRM
• Enterprise IAM solutions

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• SAP Security and/or SAP GRC certifications are preferred.
• Experience supporting global SAP programs is highly desirable.
• Experience working in regulated environments with strong audit and compliance requirements is a plus.