SAP Security Consultant

Role Overview :

We are looking for an experienced SAP Security Consultant with 58 years of hands-on experience across SAP R/3 and S/4HANA Security. The ideal candidate will have strong expertise in SAP authorization, role design, Fiori security, HANA security, GRC, and security troubleshooting.

The candidate will be responsible for designing and implementing SAP security strategies, building roles across multiple SAP systems, resolving authorization issues, supporting S/4HANA implementations, and ensuring compliance with security and audit requirements.

Key Responsibilities :

SAP Security Strategy & Role Design :

- Gather business and technical requirements and document the S/4HANA Security Strategy and framework.

- Design, build, and maintain roles for S/4HANA Transactional and MDG systems.

- Design and maintain security roles for :

i. SAP Fiori Gateway

ii. SAP GRC 10.1

iii. BW/4HANA

iv. HANA Database

v. SAP R/3 and other enterprise systems

- Analyze business requirements and translate them into appropriate authorization concepts and role structures.

- Maintain and optimize SAP authorization objects and role assignments.

SAP Fiori Security :

- Design security roles for SAP Fiori applications by assigning appropriate catalogs and groups to S/4HANA roles.

- Activate and troubleshoot required Fiori services using /IWFND/MAINTSERVICE.

- Work with business users to identify and resolve Fiori application authorization issues.

- Troubleshoot missing OData services and authorization issues using /IWFND/ERRORLOG.

- Coordinate with Basis and Fiori configuration teams to activate required services and resolve technical issues.

- Work with Fiori configuration teams to identify inactive applications generating frontend or backend authorization issues.

- Customize catalogs to remove inactive or unnecessary applications.

- Optimize the Fiori user experience by reducing unnecessary groups, tiles, and applications and improving home-page load performance.

S/4HANA Implementation & Go-Live Support :

- Document and implement SAP Security cut-over activities for S/4HANA go-live.

- Support security activities during project implementation and ensure timely resolution of authorization issues.

- Provide quick turnaround for security incidents and issues during implementation and post-go-live support.

- Collaborate with Basis, Fiori, functional, and technical teams to resolve cross-functional security issues.

Authorization Troubleshooting & Administration :

- Troubleshoot SAP authorization issues using ST01 and SU53.

- Analyze authorization traces and identify missing authorization objects and values.

- Maintain authorization checks for customized transaction codes using SU24.

- Use SUIM reports and relevant SAP security tables, including SE16, for user and role analysis.

- Perform user and role analysis to identify authorization gaps and potential security risks.

- Conduct regular security checks and support internal and external audit requests.

- Analyze users with critical authorization objects and access using SUIM reports.

- Review and validate system security settings and authorization assignments.

Required Skills & Experience :

- 5- 8 years of experience in SAP Security.

- Strong hands-on experience in SAP R/3 Security and S/4HANA Security.

- Strong knowledge of SAP authorization concepts, role design, and user administration.

- Hands-on experience with S/4HANA Security, including Transactional and MDG roles.

- Strong experience with SAP Fiori Security and Fiori Gateway.

- Experience with Fiori catalogs, groups, OData services, and authorization troubleshooting.

- Experience working with :

i. GRC 10.1

ii. BW/4HANA

iii. HANA Database Security

iv. SAP R/3 Security

- Strong troubleshooting experience using ST01, SU53, SU24, SUIM, and SE16.

- Experience supporting S/4HANA implementation, cut-over, and go-live activities.

- Strong understanding of SAP authorization objects, roles, profiles, and access controls.

- Experience handling internal/external audits and monthly security checks.