SAP Security - BW, S4 HANA and SAP BTP

Position - SAP Security - BW, S4 HANA and SAP BTP

Location
- Raritan, NJ

Duration
- Long Term

The SAP Security Engineer is responsible for securing the enterprise's hybrid SAP landscape. This role demands expertise in building and managing Role-Based Access Controls (RBAC), implementing Identity and Access Management (IAM) across cloud and on-premise systems, and safeguarding sensitive analytical data.

The consultant should have worked on the SAP S/4 HANA implementation projects as a Security consultant establishing end to end security set up in SAP S/4 HANA as well as in SAP BTP.

• Architect and configure SAP Cloud Identity Services (IAS) and Identity Provisioning Services (IPS) to manage user life cycles across BTP and SaaS applications.
• Secure cloud-to-on-premise connections using SAP Cloud Connector and manage destinations, trust configurations, and OAuth clients.
• Monitor BTP subaccounts, role collections, and ensure compliance with cloud shared-responsibility models.
• Design and maintain Role-Based Access Control (RBAC) and PFCG roles for S/4
  
  HANA, including complex custom transactions and Structural Profiles.
• Build and secure SAP Fiori catalogs, groups, and spaces, mapping UI-level access to backend authorization objects.
• Perform Segregation of Duties (SoD) conflict analysis and remediation using tools like SAP GRC or Identity Access Governance (IAG).

• Design complex data-level authorizations using Analysis Authorizations (and legacy Reporting Authorizations) in SAP BW and BW/4
  
  HANA.
• Secure reporting layers within SAP Analytics Cloud (SAC), managing teams, folders, and data access dimensions.
• Apply strict row-level and column-level security to integrate with backend Info Cubes, Data Store Objects (DSOs), and queries.

• Cloud Knowledge: Familiarity with BTP Global Accounts, Subaccounts, Entitlements, and Cloud Foundry security models.
• Analytical
  
  Skills:
  
  Deep understanding of SAP BW Analysis Authorizations and multi-dimensional security models.
• Certifications: Desirable credentials include SAP Certified Technology Associate (SAP BTP, SAP S/4
  
  HANA System Administration, or SAP HANA).