SAP Security Specialist

This role is for a SAP BASIS Security Engineer / Administrator.

The following details required and desired skills:

• In‑depth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP Net Weaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security

• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
• Experience with software systems design

• Administration of SAP ECC, S/4
  
  HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, Success Factors
• Management of SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services

• Design, build, and maintain composite and single roles
• Conduct role de‑duplication, role testing, and segregation‑of‑duties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools

• Implementation of SoD controls and remediation
• Ability to produce audit‑ready documentation and reports
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation

• SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
• SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
• Use of transport tools (CTS, STMS) and change‑management workflows
• Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
• Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/)
• Service Now or any other incident management tool

• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting root‑cause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening

• Basic ABAP debugging and code review for security‑related enhancements
• Scripting (Power Shell, Bash, Python) for automation of user provisioning and reporting

• Experience with Agile or Waterfall delivery models
• Ability to manage multiple security projects, deadlines, and stakeholder expectations

• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training end‑users and administrators on security best practices

• Strong analytical and problem‑solving abilities
• Attention to detail and high level of accuracy
• Proactive mindset and continuous learning orientation
• Collaborative mindset and approach to work