Key Responsibilities & Required Skills
Design and implement end-to-end SAP S/4HANA security architecture for a Greenfield implementation, including role design aligned with business processes and organizational hierarchy.
Build and maintain single, derived, and composite roles using PFCG and follow best-practice role design methodology with SU24 authorization defaults.
Work closely with functional teams to translate business process requirements into secure and compliant authorization roles.
Implement and manage SAP Fiori security, including catalogs, spaces/pages, groups, and OData service authorization.
Configure and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
Perform Segregation of Duties (SoD) risk analysis, identify access conflicts, and implement mitigation controls aligned with audit and compliance requirements.
Implement preventive and detective access controls to strengthen governance and reduce access risks across SAP systems.
Configure and support SAP Identity Authentication Service (IAS) for identity federation, authentication policies, and single sign-on (SSO).
Configure SAP Identity Provisioning Service (IPS) for automated user and role provisioning between SAP systems and cloud applications.
Support SAP BTP security and access management, including role collections, trust configuration with IAS, and integration with backend systems such as S/4HANA.
Work with Basis and infrastructure teams to establish secure connectivity and identity federation between S/4HANA, BTP, and other SAP cloud solutions.
Support user provisioning, role testing, integration testing, and User Acceptance Testing (UAT) during implementation phases.
Participate in cutover planning, go-live activities, and post-go-live access governance.
Support internal and external audits by providing security documentation, access controls evidence, and compliance reporting.
Contribute to continuous improvement initiatives for SAP security governance, identity management, and access control processes.
Strong verbal and written communication skills with the ability to effectively interact with business users, functional teams, and auditors on SAP Security and GRC related topics.
Ability to clearly document security processes, role designs, and access control procedures, and present findings during access reviews, compliance discussions, and audit meetings.