SAP S4 HANA Security Consultant

• Design and implement SAP S/4HANA security architecture, including roles, profiles, and authorizations
• Create, maintain, and manage user roles across multiple SAP landscapes (ECC, Fiori, GRC, BW, HANA)
• Perform role design workshops with business process owners and map access requirements
• Conduct periodic user access reviews and compliance audits (SOX, GDPR, etc.)
• Implement and maintain Fiori catalog, group, and role assignments for users
• Troubleshoot authorization issues and analyze SU53 logs, ST01 traces, and security dumps
• Integrate SAP S/4HANA Security with SAP GRC Access Control for risk and compliance management
• Support system migrations and upgrades by validating roles and performing security testing
• Ensure adherence to segregation of duties (SoD) principles and remediation of conflicts
• Prepare and maintain documentation for security policies, processes, and configurations

• Strong understanding of SAP authorization concepts (PFCG, SU24, SU53, SUIM)
• Deep experience with SAP S/4HANA Security, Fiori, and HANA database security
• Proficiency in SAP GRC Access Control (ARM, ARA, BRM, EAM modules)
• Knowledge of SAML, OAuth, and Single Sign-On (SSO) integrations
• Strong communication and documentation skills to work with auditors and stakeholders
• Bachelor’s degree in Computer Science, Information Systems, or related field
• 5–8 years of SAP Security experience, with at least 2 years in S/4HANA environments
• SAP Certified Technology Associate – SAP System Security and Authorizations preferred

Experience with SAP Cloud Identity Services and SAP BTP Security is an advantage