SAP S​/HANA Security Architecture and Implementation Consultant

Our client's ERP system is a continuous organizational transformation, enabling high-quality and cost-effective service delivery for evolving United Nations mandates worldwide. Through modernization of business processes and technologies, the system continues to evolve its SAP landscape with the implementation of SAP S/4

HANA and related cloud solutions. The SAP S/4

HANA Security Architecture Consultant will support the design, implementation and governance of SAP security across the S/4

HANA project. The consultant will work closely with business process owners, functional consultants, Basis, Infrastructure, Cybersecurity and Enterprise Architecture teams to ensure that security is designed and implemented in accordance with SAP and the organization.

• Design and implement SAP S/4
  
  HANA security architecture for Greenfield and Brownfield implementation projects.
• Define enterprise authorization strategy across SAP S/4
  
  HANA modules including Finance, Procurement, Logistics, Supply Chain and HCM.
• Develop role design methodology based on SAP Best Practices and Fiori business catalogs.
• Lead redesign of SAP ECC security into SAP S/4
  
  HANA security utilizing a Greenfield approach where appropriate.
• Design and implement SAP Fiori Launchpad security including catalogs, spaces, pages, business roles and business catalogs.
• Design authorization concepts for embedded analytics, CDS Views and SAP Gateway services.
• Define Segregation of Duties (SoD) requirements together with Governance, Risk and Compliance teams.
• Develop security architecture for SAP Business Technology Platform (BTP) integrations where required.
• Support integration security involving SAP Cloud ALM, Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Microsoft Entra  Single Sign-On.
• Perform security architecture reviews throughout Design, Build, Test and Deploy phases.
• Conduct security risk assessments and recommend mitigation strategies.
• Support security-related testing including Unit Testing, Integration Testing, User Acceptance Testing and Production Cutover.
• Develop security standards, procedures, technical documentation and operational guides.
• Provide knowledge transfer and mentoring to internal SAP Security administrators.

A minimum of 10 years of progressively responsible experience in SAP Security architecture, implementation and support, including:

• Minimum three full lifecycle SAP ERP or SAP S/4
  
  HANA implementations.
• Strong expertise in SAP S/4
  
  HANA Authorization Concept.
• Extensive experience with:
  • SAP Fiori Security
  • SAP Gateway Security
  • CDS Authorization
  • OData Security
  • Embedded Analytics
• Experience designing Fiori Spaces and Pages.
• Experience designing SAP Business Roles and Business Catalogs.
• Strong understanding of SAP authorization objects and organizational level security.
• Experience with SU24, PFCG, SU25, SUIM, STAUTHTRACE and authorization troubleshooting.
• Experience with SAP Identity Management concepts including IAS, IPS or Microsoft Entra n.
• Experience implementing Single Sign-On using SAML 2.0 and OAuth technologies.
• Knowledge of SAP BTP security architecture.
• Experience implementing security for cloud and hybrid SAP landscapes.
• Knowledge of SAP Activate methodology.
• Experience working in large global organizations with multiple SAP landscapes.
• Excellent communication skills and experience working with executive stakeholders.

TRIGYN TECHNOLOGIES, INC. is an EQUAL OPPORTUNITY EMPLOYER and has been in business for 35 years. TRIGYN is an ISO 27001:2022 and CMMI Level 5 certified company.