SAP S/4HANA Security Consultant

Job title: SAP S/4HANA Security Consultant
Work Location: Irving, TX - 75039 - Hybrid
Would you require the candidates to meet you for in person interview? Yes
Is Skype/WebEx interview,OK? Ok
If onsite, will you be considering relocation candidates: Yes
Does this position require Visa independent candidates only? Yes

Job Description:
We are looking for an experienced SAP S/4HANA Security Consultant to join our SAP team and drive security design, implementation, and governance initiatives across SAP landscapes. The ideal candidate will possess strong expertise in SAP Security and Authorizations, SAP S/4HANA Security, SAP Fiori Security, and SAP GRC Access Control. The role requires hands-on experience in designing authorization concepts, implementing role-based access controls, ensuring Segregation of Duties (SoD) compliance, and supporting security requirements across SAP transformation programs.
The consultant will work closely with business stakeholders, functional consultants, auditors, BASIS teams, and project managers to ensure secure and compliant access management within SAP S/4HANA environments. The candidate should have a thorough understanding of SAP security architecture, risk management processes, audit controls, and access governance frameworks.
Key Responsibilities
Design, develop, and maintain SAP security roles and authorization concepts across SAP S/4HANA environments in alignment with business and compliance requirements.
Configure and support SAP authorization objects, composite roles, single roles, derived roles, and organizational level restrictions to enforce secure access controls.
Perform end-to-end user administration activities including user provisioning, modifications, role assignments, and deprovisioning while adhering to established security policies.
Lead security design workshops with business and functional teams to gather access requirements and translate them into scalable security solutions.
Implement and manage SAP Fiori security components including catalogs, groups, spaces, pages, OData services, and launchpad authorizations.
Support embedded analytics, CDS views, and SAP Gateway security requirements within S/4HANA landscapes.
Conduct Segregation of Duties (SoD) assessments and collaborate with business stakeholders to identify, mitigate, and remediate security risks.
Work extensively with SAP GRC Access Control modules such as Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
Perform periodic user access reviews, role rationalization activities, and compliance assessments to support corporate governance requirements.
Monitor and investigate authorization issues using tools such as SU53, ST01, STAUTHTRACE, SUIM, PFCG, and security audit logs.
Support internal and external audit activities by providing security documentation, access reports, role matrices, SoD analysis reports, and compliance evidence.
Collaborate with SAP Basis, Functional, ABAP, Integration, and Infrastructure teams to address complex authorization and security-related challenges.
Participate in SAP implementation, rollout, upgrade, migration, and S/4HANA transformation initiatives to ensure secure deployment and access governance.
Develop and maintain security standards, naming conventions, role design guidelines, and access control procedures.
Evaluate new SAP products and technologies to ensure security requirements are integrated into enterprise architecture and business processes.
Minimum years of experience: 10+ Years

Required Technical Skills
SAP Security & Authorization
SAP Security and Authorizations
SAP S/4HANA Security

SAP ECC Security:
User and Role Administration
Authorization Concept Design
Role Build and Role Maintenance
Organizational Level Security
PFCG Configuration

SAP Fiori Security:
Fiori Catalogs, Groups, Spaces, and Pages
SAP Launchpad Security
OData Service Authorizations
SAP Gateway Security
CDS View Authorization Concepts
Embedded Analytics Security

SAP GRC & Compliance:
SAP GRC Access Control
Access Risk Analysis (ARA)
Access Request Management (ARM)
Emergency Access Management (EAM)
Business Role Management (BRM)
Segregation of Duties (SoD)
Audit and Compliance Controls
Access Governance and Risk Management

Troubleshooting & Monitoring
SU53
SUIM
PFCG
ST01 Trace
STAUTHTRACE
Security Audit Log
Authorization Analysis and Remediation

Preferred Skills:
SAP BTP Security
SAP IAS and IPS
SAP Cloud Identity Services
SAP MDG Security
SAP Ariba Security
SAP SuccessFactors Security
SAP BW/4HANA Security
SAP Analytics Cloud (SAC) Security
SAP Solution Manager and ChaRM
Identity and Access Management (IAM) Solutions

Qualifications
Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related discipline.
Relevant SAP Security and SAP GRC certifications are preferred.
Proven experience supporting global SAP implementation, rollout, support, or transformation programs.
Experience working in regulated environments with stringent compliance and audit requirements will be an added advantage.

Desired Candidate Profile
The ideal candidate should demonstrate strong technical expertise in SAP Security and S/4HANA authorization frameworks, coupled with a solid understanding of compliance, audit, and risk management requirements. The individual should be capable of working across multiple SAP modules and collaborating with cross-functional teams to implement secure, scalable, and compliant access solutions. Strong analytical skills, problem-solving capabilities, stakeholder management, and communication skills are essential for success in this role.