Principal SAP Security Consultant

Job details


Job Role


Package Consultant 3

Career Role


Principal Consultant - US

Work Location


Pomona, CA

State / Region / Province


California

Country


USA

Domain


Delivery

Interest Group


Infosys Limited

Company


ITL USA

Requisition ID


148711BR

Technical Skills 1


Domain|Enterprise Package processes|Enterprise Functions

Technical Skills 2


Technology|SAP Technical|SAP Security

Salary min


101489

Salary max


163385

Overview


The Infosys SURE (Services, Utilities, Resources, Energy) unit is dedicated to empowering businesses within the services, utilities, energy, and resources sectors through strategic digital transformation. We specialize in guiding organizations through the complexities of disruption, enabling them to unlock value and realize sustainable growth. Join us to be part of a pioneering team that leverages advanced AI and digital technologies to drive innovation and operational excellence. You'll have the opportunity to work on transformative projects that shape the future of these critical industries, collaborate with industry experts, and develop resilient strategies that respond to change and seize new opportunities. If you're passionate about AI and eager to make a significant impact, the Infosys SURE unit is the perfect place for you to grow and excel



In the assigned Job Role of Package Consultant 3, your Area Of Responsibility will be as below:


Analyze complex business processes to identify optimization opportunities and draft detailed requirement specifications that align with enterprise architecture standards
Define and develop solution architecture, steering customization and integration efforts based on thorough business analysis
Design and implement advanced customizations basis ERP platform's capabilities and limitations and develop critical software applications in collaboration with the development team
Develop and implement complex integration workflows to connect the ERP system with external applications, while leading large-scale data migration strategies to ensure data integrity
Implement advanced performance optimization strategies focused on scalability, reliability, and user experience, while leading compliance initiatives throughs audits, to uphold security protocols and industry standards
Develop detailed documentation for complex ERP customizations and lead training workshops tailored to various user groups, to ensure effective knowledge transfer

Your contribution to the team:


Expertise in ERP systems, architecture, and advanced customization techniques
Ability to design complex integration solutions and guide large-scale data migrations
Proactive problem-solving to streamline complex requirements
A strategic mindset to align technical solutions with business goals and market trends.
Deep understanding of compliance requirements, security protocols, and performance optimization methodologies
Sector specific expertise for high quality project delivery

Required Skill and Experience


• Experience in SAP Security in Development / Configuration / Solutions Evaluation / Validation and Deployment
• At least 10 years of experience in Project life cycle activities on development, maintenance, and upgrade projects
• At least 10 years of experience in Design and Architecture review
• At least 10 years of experience in Business Process Consulting, problem definition, Architecture / Design / Detailing of Processes
• Security expertise in SAP S/4HANA, HANA, Fiori, ECC / CRM / BW / BIbO / EP / CUA / BOBJ / GRC (hands-on experience in minimum 3 systems - e.g., ECC, GRC, and S/4HANA)
• GRC Access Control support / upgrade experience
• Experience in Process Control & Automations will be an added advantage
• Team leading / Management experience, resource planning, issue resolution, weekly status reports, and timesheets
• Experience in SoD remediation and conducting SOX controls / reviews
• Experience working on security assessments for various SAP systems
• Hands-on experience executing SU25 upgrade steps during SAP ECC to S/4HANA upgrades, including:
• Experience developing and maintaining an SU25 Upgrade Playbook, covering pre-upgrade baseline snapshots, step-by-step execution procedures, exception handling, sign-off checkpoints, and post-upgrade validation
• Experience performing pre- and post-upgrade role delta analysis to identify authorization gaps introduced by S/4HANA simplification items
• Experience remediating Fiori tile and OData service authorizations introduced during upgrade, including catalog / group assignment and PFCG Fiori object integration
• Knowledge of SAP security impact assessment for simplification items from the SAP Simplification List relevant to authorization objects and role design
• Experience conducting end-to-end SAP Security Assessments across ECC, S/4HANA, BW, GRC, and cloud systems, covering people, process, and technology dimensions
• Ability to evaluate and baseline the current state of SAP security design, including role architecture, authorization concept documentation, naming conventions, and structural design patterns (single roles, composite roles, derived roles, reference roles)


Preferred Skill and Experience


• Experience reviewing and assessing SAP authorization concepts against industry best practices, SAP standard recommendations, and customer-defined security policies
• Hands-on experience assessing critical authorization objects and sensitive access combinations, including evaluation of SAP profile parameter baselines for security-relevant parameters (login/, auth/, rdisp/, icm/) and benchmarking against SAP security hardening guides and CIS/DSAG baselines
• Ability to assess SAP network security controls including RFC trusted system relationships, ICM/ICF service exposure, and Web Dispatcher configurations
• Experience reviewing SAP GRC Access Control configuration including ruleset completeness, workflow design, role owner assignments, access request process effectiveness, and periodic review cycle health
• Familiarity with SAP Fiori security assessment activities including launchpad catalog / group access review, OData service authorization evaluation, and backend authorization object alignment
• Experience evaluating SAP audit log and security monitoring configurations, including Security Audit Log (SM19 / SM20), System Log (SM21), and Change Document review completeness
• Ability to assess user administration procedures and governance including user type usage (Dialog, Service, System, Communication users), password policy enforcement, and periodic user access review processes
• Experience evaluating SOX and GxP control effectiveness within SAP security, including evidence of periodic SoD reviews, privileged access reviews, and audit trail integrity
• Experience benchmarking client SAP security posture against industry frameworks such as SAP Security Baseline, DSAG Security Guidelines, CIS SAP Benchmarks, and NIST controls
• Ability to facilitate assessment workshops and interviews with SAP Basis, Security, Internal Audit, and Business Process Owner stakeholders to gather evidence and validate findings
• Good understanding of business processes in the Life Sciences / Pharmaceutical domain
• Good understanding of GxP and SOX requirements; should have working experience in a validated environment
• Ability to communicate and collaborate with senior business and IT stakeholders
• Strong communication skills and ability to understand Life Science-specific document requirements and experience updating the same
• Experience in providing professional client presentations
• Effective time management, communication, and organizational skills
• Proficient in use of Word, Excel, Visio, and PowerPoint
• Ability to work independently without supervision
• Strong analytical and problem-solving skills with the ability to assess relevant facts
• Excellent communication and interpersonal skills; well-versed in English with excellent spoken and written skills
• Proactive approach to problem solving; motivated self-starter with exceptional team building, leadership, and interpersonal skills
• Experience leading large upgrade teams with onsite and offshore coordination
• High-impact communication with senior stakeholders
• Monitor systems and report any issues to Senior SAP Security and Controls Consultant
• Provide technical support for customer role upgrade and / or role redesign by assisting customers in defining roles and remediating potential Segregation of Duty (SoD) conflicts
• Research client problems and provide accurate, timely documentation
• Enforce security policies and procedures by performing periodic reviews of security reports
• Continuously develop problem-solving skills and apply critical thinking
• Develop awareness and understanding of SAP Security products and evolving upgrade toolsets
• Familiarity with onsite-offshore models; has led teams of offshore and onsite resources


Additional Required Qualifications


• Bachelor's degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education.
• This position may require relocation and/or travel to work/project location.
• Candidates authorized to work for any employer in the United States without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role now or in the future.


Benefits

Along with competitive pay, as a full-time Infosys employee you are also eligible for the following benefits:

• Medical/Dental/Vision/Life Insurance
• Long-term/Short-term Disability
• Health and Dependent Care Reimbursement Accounts
• Insurance (Accident, Critical Illness , Hospital Indemnity, Legal)
• 401(k) plan and contributions dependent on salary level
• Paid holidays plus Paid Time Off

About Us
Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.



EEO
Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability.