SAP Security - BW, S4 HANA and SAP BTP

Company Profile: Quantum Integrators is an international strategy and business consulting group whose mission is to help clients create and sustain competitive advantage. As a truly client-focused firm, our highly trained and experienced consultants consider it their mandate to help client organizations achieve a quantum state.

Position : SAP Security - BW, S4 HANA and SAP BTP

Location: Pune/Nagpur, Maharashtra (Onsite)

Duration: Full time

Shift: UK Shift (04.00 PM - 01.00 AM IST)

Experience: 6-8 years mandatory

Job Description:

Skills: Strong SAP Security in the areas of SAP BW, SAP S/4 HANA and SAP BTP (Highest weightage will be on SAP BTP Security).

Experience: 6 to 8 years overall, of which 2 to 3 years on SAP BTP Security

Job Summary:

The SAP Security Engineer is responsible for securing the enterprise's hybrid SAP landscape. This role demands expertise in building and managing Role-Based Access Controls (RBAC), implementing Identity and Access Management (IAM) across cloud and on-premise systems, and safeguarding sensitive analytical data.

The consultant should have worked on the SAP S/4 HANA implementation projects as a Security consultant establishing end to end security set up in SAP S/4 HANA as well as in SAP BTP.

Key Responsibilities:

SAP BTP Security & Cloud Governance (Must have):

• Architect and configure SAP Cloud Identity Services (IAS) and Identity Provisioning Services (IPS) to manage user lifecycles across BTP and SaaS applications.
• Secure cloud-to-on-premise connections using SAP Cloud Connector and manage destinations, trust configurations, and OAuth clients.
• Monitor BTP subaccounts, role collections, and ensure compliance with cloud shared-responsibility models.

SAP S/4HANA & Fiori Security:

• Design and maintain Role-Based Access Control (RBAC) and PFCG roles for S/4HANA, including complex custom transactions and Structural Profiles.
• Build and secure SAP Fiori catalogs, groups, and spaces, mapping UI-level access to backend authorization objects.
• Perform Segregation of Duties (SoD) conflict analysis and remediation using tools like SAP GRC or Identity Access Governance (IAG).

SAP BW (Business Warehouse) & Analytics Security:

• Design complex data-level authorizations using Analysis Authorizations (and legacy Reporting Authorizations) in SAP BW and BW/4HANA.
• Secure reporting layers within SAP Analytics Cloud (SAC), managing teams, folders, and data access dimensions.
• Apply strict row-level and column-level security to integrate with backend Info Cubes, Datastore Objects (DSOs), and queries.

Qualifications & Experience:

• Cloud Knowledge: Familiarity with BTP Global Accounts, Subaccounts, Entitlements, and Cloud Foundry security models.
• Analytical Skills: Deep understanding of SAP BW Analysis Authorizations and multi-dimensional security models.
• Certifications: Desirable credentials include SAP Certified Technology Associate (SAP BTP, SAP S/4HANA System Administration, or SAP HANA).