SAP Security Architect

• Location Orange Tower, Media City UK,Salford Greater Manchester,Salford, M50 2HF
  ,United Kingdom
• Employee Type ESP - Fixed Term Employee

Location: Manchester, United Kingdom
Employment Type: Full Time, Permanent

At ESP Global Services, we deliver mission-critical technology services to some of the world's most recognised organisations. As our customers continue to modernise their SAP estates, we are seeking an experienced SAP Security Architect to lead the design, governance and implementation of enterprise security solutions across complex SAP landscapes.

This is an opportunity to shape security strategy during large-scale SAP transformation programmes, including ECC to SAP S/4

HANA migrations, while working alongside experienced enterprise architects, infrastructure specialists and business stakeholders.

If you enjoy solving complex security challenges, influencing enterprise architecture and delivering secure-by-design SAP environments, we'd like to hear from you.

As SAP Security Architect, you will own the security architecture for SAP platforms, ensuring security, compliance and governance are embedded throughout the solution lifecycle.

You will provide technical leadership across both existing SAP ECC environments and future SAP S/4

HANA platforms, helping customers modernise their security model whilst maintaining business continuity and regulatory compliance.

Working closely with project teams, enterprise architects, infrastructure teams and business stakeholders, you will design scalable security frameworks that support both cloud and hybrid SAP environments.

You will be responsible for:

• Designing enterprise SAP security architectures across SAP ECC, SAP S/4
  
  HANA and hybrid cloud environments.
• Developing and governing SAP authorisation strategies, role design and access management standards.
• Designing and maintaining Segregation of Duties (SoD) controls and governance frameworks.
• Configuring and governing SAP security roles across SAP ECC, SAP S/4
  
  HANA, SAP Fiori and SAP GRC.
• Integrating SAP environments with enterprise Identity and Access Management (IAM) platforms using Single Sign-On (SSO), SAML and related authentication technologies.
• Leading SAP security risk assessments, vulnerability analysis and remediation activities.
• Supporting audit readiness and ensuring compliance with regulatory and corporate security standards.
• Working with technical and business stakeholders to deliver secure solutions aligned to enterprise architecture.

A significant aspect of this role is supporting enterprise transformation programmes.

You will:

• Design the security strategy for SAP ECC to SAP S/4
  
  HANA migrations.
• Redesign legacy SAP ECC roles into modern SAP S/4
  
  HANA and SAP Fiori authorisation models.
• Develop SAP HANA database security, user management and analytical privilege models.
• Lead the redesign of Segregation of Duties (SoD) rule sets during business process transformation.
• Integrate legacy and modern SAP platforms with enterprise IAM solutions.
• Conduct threat modelling and security assessments throughout the migration lifecycle.
• Ensure secure transition from traditional ABAP security models to modern SAP HANA and cloud security frameworks.
• Support programme governance, risk management and architecture decision making.

We're looking for an experienced SAP Security professional who combines deep technical expertise with strong architecture and stakeholder management skills.

You will bring:

• Minimum 10-12 years' experience in SAP Security.
• Proven experience delivering at least one full lifecycle SAP ECC to SAP S/4
  
  HANA migration.
• Strong experience designing enterprise SAP security architectures.
• Expert knowledge of SAP authorisations and role design.
• Advanced knowledge of SAP HANA database security.
• Strong experience with SAP GRC Access Control and Process Control.
• Experience implementing SAP Fiori security, catalogues, groups and OData services.
• Knowledge of SU24 authorisation object maintenance and custom transaction (Z-code) remediation.
• Experience integrating SAP with enterprise IAM solutions and Single Sign-On technologies.
• Strong understanding of security governance, audit and compliance frameworks including SOX and GDPR.
• Excellent communication skills with the ability to influence both technical and business stakeholders.

Experience with one or more of the following would be advantageous:

• SAP BTP security
• Cloud security architecture (Azure, AWS or Google Cloud)
• Identity Governance and Administration (IGA) platforms
• Cyber security architecture
• Enterprise Architecture frameworks (TOGAF or equivalent)
• Security certifications such as CISSP, CISM or SAP Security certifications

ESP Global Services is a leading provider of IT managed services, delivering innovative technology solutions to customers across aviation, retail, pharmaceuticals, logistics, financial services and other global…