For an international organization, we are urgently looking for a Senior SAP S/4HANA Security Architecture Consultant for a Full Remote position.
The consultant will be responsible for the design, implementation and governance of SAP security and authorization architecture across a major S/4HANA transformation.
Candidates need to be willing to work US office hours.
Tasks and Responsibilities:
- Design and implement SAP S/4HANA security architecture for Greenfield and Brownfield projects;
- Define authorization strategies across Finance, Procurement, Logistics, Supply Chain and HCM;
- Redesign existing SAP ECC roles and authorizations for S/4HANA;
- Design role concepts based on SAP best practices and Fiori Business Roles and Catalogs;
- Design SAP Fiori Launchpad security, including catalogs, spaces, pages and business roles;
- Design authorization concepts for CDS Views, OData, SAP Gateway and Embedded Analytics;
- Define Segregation of Duties requirements with SAP GRC teams;
- Design security architecture for SAP BTP and hybrid SAP environments;
- Support identity integrations using SAP IAS, IPS and Microsoft Entra ID;
- Design and support Single Sign-On using SAML 2.0 and OAuth;
- Perform security architecture reviews and risk assessments;
- Troubleshoot complex SAP authorization and security issues;
- Support security testing, UAT, cutover and production deployment;
- Develop security standards and technical documentation;
- Provide knowledge transfer to SAP Security administrators.
Profile:
- Bachelor or Master degree;
- 10+ years of SAP Security experience;
- Experience with at least 3 full lifecycle SAP ERP or S/4HANA implementations;
- Strong expertise in SAP S/4HANA roles and authorization concepts;
- Strong hands-on experience with SAP Fiori Security;
- Experience with SAP Gateway, CDS and OData security;
- Experience designing Fiori Spaces, Pages, Business Roles and Business Catalogs;
- Strong knowledge of SAP authorization objects and organizational-level security;
- Hands-on experience with PFCG, SU24, SU25, SUIM and STAUTHTRACE;
- Experience with SAP IAS, IPS and/or Microsoft Entra ID;
- Experience implementing SSO using SAML 2.0 and OAuth;
- Knowledge of SAP BTP security architecture;
- Experience securing cloud and hybrid SAP landscapes;
- Excellent communication skills;
- Fluent in English.
Key Technologies:
SAP S/4HANA | SAP Security | SAP Authorizations | PFCG | SU24 | SU25 | SUIM | STAUTHTRACE | Fiori Security | CDS | OData | SAP Gateway | SAP BTP | SAP IAS | SAP IPS | Entra ID | SAML 2.0 | OAuth
