Senior SAP S​/HANA Security Architecture Consultant – Full Remote

Position: Senior SAP S/4HANA Security Architecture Consultant – Full Remote
For an international organization, we are urgently looking for a Senior SAP S/4

HANA Security Architecture Consultant for a Full Remote position.

The consultant will be responsible for the design, implementation and governance of SAP security and authorization architecture across a major S/4

HANA transformation.

Candidates need to be willing to work US office hours.

Tasks and Responsibilities:
Design and implement SAP S/4

HANA security architecture for Greenfield and Brownfield projects;
Define authorization strategies across Finance, Procurement, Logistics, Supply Chain and HCM;
Redesign existing SAP ECC roles and authorizations for S/4

HANA;
Design role concepts based on SAP best practices and Fiori Business Roles and Catalogs;
Design SAP Fiori Launchpad security, including catalogs, spaces, pages and business roles;
Design authorization concepts for CDS Views, OData, SAP Gateway and Embedded Analytics;
Define Segregation of Duties requirements with SAP GRC teams;
Design security architecture for SAP BTP and hybrid SAP environments;
Support identity integrations using SAP IAS, IPS and Microsoft Entra ;
Design and support Single Sign-On using SAML 2.0 and OAuth;
Perform security architecture reviews and risk assessments;
Troubleshoot complex SAP authorization and security issues;
Support security testing, UAT, cutover and production deployment;
Develop security standards and technical documentation;
Provide knowledge transfer to SAP Security administrators.

Profile:
Bachelor or Master degree;
10+ years of SAP Security experience;

Experience with at least 3 full lifecycle SAP ERP or S/4

HANA implementations;
Strong expertise in SAP S/4

HANA roles and authorization concepts;
Strong hands-on experience with SAP Fiori Security;

Experience with SAP Gateway, CDS and OData security;
Experience designing Fiori Spaces, Pages, Business Roles and Business Catalogs;
Strong knowledge of SAP authorization objects and organizational-level security;
Hands-on experience with PFCG, SU24, SU25, SUIM and STAUTHTRACE;

Experience with SAP IAS, IPS and/or Microsoft Entra ;
Experience implementing SSO using SAML 2.0 and OAuth;
Knowledge of SAP BTP security architecture;
Experience securing cloud and hybrid SAP landscapes;
Excellent communication skills;
Fluent in English.

Key Technologies:
SAP S/4

HANA | SAP Security | SAP Authorizations | PFCG | SU24 | SU25 | SUIM | STAUTHTRACE | Fiori Security | CDS | OData | SAP Gateway | SAP BTP | SAP IAS | SAP IPS | Entra  | SAML 2.0 | OAuth