SAP S​/4HANA Security Consultant

Roles and Responsibilities

Design, develop, and maintain SAP security roles and authorization concepts across S/4

HANA environments.

Configure and manage single, composite, and derived roles, authorization objects, and organizational-level restrictions using PFCG.

Manage user provisioning, role assignments, modifications, and deprovisioning in accordance with security policies.

Lead security design workshops and translate business requirements into scalable authorization solutions.

Implement and support SAP Fiori security, including catalogs, spaces, pages, launchpad authorizations, OData services, and SAP Gateway.

Support security requirements for CDS views, embedded analytics, and other S/4

HANA capabilities.

Perform SoD assessments, identify access risks, and coordinate remediation and mitigation activities.

Configure and support SAP GRC Access Control, including ARA, ARM, EAM, and BRM.

Conduct periodic access reviews, role rationalization, and compliance assessments.

Troubleshoot authorization issues using SU53, SUIM, PFCG, ST01, STAUTHTRACE, and Security Audit Logs.

Support internal and external audits by preparing role matrices, access reports, SoD analysis, and compliance evidence.

Collaborate with Basis, ABAP, functional, integration, and infrastructure teams to resolve complex security and authorization issues.

Support SAP implementations, upgrades, migrations, rollouts, and S/4

HANA transformation initiatives.

Establish security standards, role naming conventions, authorization guidelines, and access control procedures.

Evaluate new SAP technologies and ensure security requirements are incorporated into enterprise architecture and business processes.

Required Skills

10+ years of experience in SAP Security and Authorizations.

Strong hands-on experience with SAP S/4

HANA Security and authorization frameworks.

Expertise in SAP ECC and S/4

HANA user and role administration.

Strong experience with PFCG, authorization objects, organizational levels, and role design.

Hands-on experience with SAP Fiori, Launchpad, OData, SAP Gateway, and CDS authorization concepts.

Strong experience with SAP GRC Access Control, including:

Access Risk Analysis (ARA)

Access Request Management (ARM)

Emergency Access Management (EAM)

Business Role Management (BRM)

Strong understanding of Segregation of Duties (SoD), access governance, risk management, audit, and compliance controls.

Experience troubleshooting authorization issues using SU53, SUIM, ST01, STAUTHTRACE, and Security Audit Logs.

Experience supporting SAP implementation, rollout, upgrade, migration, or transformation programs.

Strong communication, analytical, problem-solving, and stakeholder management skills.

Preferred Skills

SAP BTP Security

SAP IAS, IPS, and Cloud Identity Services

SAP MDG Security

SAP Ariba Security

SAP Success Factors Security

SAP BW/4

HANA Security

SAP Analytics Cloud (SAC) Security

SAP Solution Manager and ChaRM

Enterprise IAM solutions

Qualifications

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.

SAP Security and/or SAP GRC certifications are preferred.

Experience supporting global SAP programs is highly desirable.

Experience working in regulated environments with strong audit and compliance requirements is a plus.