About this role
We are seeking an experienced SAP S/4HANA Security Consultant with 4-7 years of hands-on expertise in SAP S/4HANA Public Cloud security to join our growing SAP practice. The successful candidate will be responsible for designing, implementing, and maintaining security and authorization frameworks for SAP S/4HANA Public Cloud environments, ensuring compliance with best practices, segregation of duties (SoD), and client-specific requirements.
- Design and implement role-based authorization concepts for SAP S/4HANA Public Cloud using Business Roles, Business Catalogs, and Restriction Types.
- Configure and manage business users, business roles, and authorizations via the Identity Access Management (IAM) apps in Fiori Launchpad.
- Integrate SAP S/4HANA Public Cloud with SAP Cloud Identity Services (IAS/IPS) for single sign-on (SSO) and user provisioning.
- Perform Segregation of Duties (SoD) analysis and remediation; collaborate with GRC teams where applicable.
- Participate in all phases of SAP implementation (SAP Activate methodology): Discover, Prepare, Explore, Realize, Deploy, and Run.
- Conduct security workshops, requirements gathering, and user training sessions.
- Document security designs, role matrices, authorization concepts, and operational procedures.
- Troubleshoot and resolve authorization issues, working closely with functional and technical teams.
- Support audit and compliance activities, including SOX, GDPR, and internal control reviews.
- Stay current with SAP's quarterly release updates for Public Cloud and assess security impacts.
- 5+ years of SAP Security experience, with a minimum of 1–2 years in SAP S/4HANA Public Cloud security.
- Strong knowledge of Business Roles, Business Catalogs, Restrictions, and Spaces/Pages in S/4HANA Public Cloud.
- Experience with SAP Fiori Launchpad security and app-level authorizations.
- Hands-on experience with SAP Cloud Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
- Understanding of SAP Activate methodology and cloud implementation lifecycle.
- Familiarity with SAP BTP (Business Technology Platform) security concepts.
- Knowledge of SoD frameworks and tools (e.g., SAP Access Control, Pathlock, or equivalent).
Excellent documentation, communication, and stakeholder management skills