SAP S/4HANA Security Consultant

Key Responsibilities

• Design, develop, and implement SAP S/4HANA Fiori Security Roles across functional areas including:

  • Sales & Distribution (SD)
  • Materials Management (MM)
  • Finance (FI)
  • General Ledger (GL)
  • Accounts Payable (AP)
  • Accounts Receivable (AR)
  • Asset Accounting (AA)

• Support SAP Security Administration activities, including:

  • Authorization object configuration
  • Single, Composite, Master, and Derived role design and maintenance
  • User and role provisioning

• Troubleshoot authorization and security issues using:

  • STAUTHTRACE
  • STUSERTRACE
  • SU53
  • ST01

• Implement and support SAP GRC Access Control 12.0 modules:

  • Access Risk Analysis (ARA)
  • Access Request Management (ARM)
  • Emergency Access Management (EAM)
  • Business Role Management (BRM)

• Administer SAP GRC configurations, including:

  • Rule sets
  • Workflows
  • Approver assignments
  • User provisioning
  • Emergency access processes
  • Access recertification

• Maintain GRC master data and perform:

  • Risk analysis
  • Compliance monitoring
  • Audit support activities

• Build and maintain MSMP workflows and configure GRC email notifications.

• Develop and maintain custom GRC rule sets, including:

  • Custom functions
  • Risk definitions
  • Segregation of Duties (SoD) controls
  • Rule-set enhancements aligned with business requirements

• Plan, coordinate, and execute SAP GRC upgrade activities.

• Configure and support synchronization jobs, including:

  • Repository Sync
  • Authorization Sync
  • Firefighter Log Sync
  • Action Usage Sync

• Investigate and resolve access request issues through audit log analysis and troubleshooting.

• Collaborate closely with application security teams to support enterprise-wide SAP security initiatives.

• Participate in 24x7 production support and on-call rotations as required.

Required Experience

• Minimum 7+ years of SAP Security experience.

• At least two full lifecycle SAP implementations.

• Hands-on experience implementing Fiori Security Roles for:

  • S/4HANA SD
  • MM
  • FI
  • GL
  • AP
  • AR
  • AA

• Experience designing, developing, testing, and deploying SAP S/4HANA Security and Fiori Roles, including Spaces and Pages architecture.

• Strong understanding of SAP Fiori security architecture, including:

  • Backend authorization concepts
  • OData service activation and authorization assignment
  • Front-end and back-end security integration

• Experience configuring and supporting:

  • SAP GRC Access Control
  • SAP GRC Process Control

• Proven experience troubleshooting workflow and user provisioning issues within SAP GRC.

Preferred Qualifications

• Experience with SAP BTP Security.
• Experience with SAP Identity Access Governance (IAG).

Required Skills

• SAP Security
• SAP S/4HANA Security
• SAP Fiori Security
• SAP GRC Access Control 12.0
• SAP HANA
• Role Design & Administration
• MSMP Workflow Configuration
• Risk Analysis & Compliance
• Authorization Troubleshooting
• OData Security Configuration