SAP Security Consultant

SAP ConsultantSeeking a C2C candidate located in the specified area.Scope of WorkSAP Consultant with over 12 years of experience architecting and implementing comprehensive security frameworks across SAP ECC, CRM, BW, Portal, S/4HANA, BW/4HANA, and SAP BTP environments. Deeply skilled in Fiori authorization design, GRC Access Control (ARA/EAM/ARM), segregation of duties (SoD) analysis, HANA database security, and integration with enterprise IAM platforms. Demonstrated ability to translate business requirements into secure, scalable, and audit-compliant role designs while collaborating with cross-functional teams through project delivery and support. Adept at ensuring end-to-end governance and compliance across hybrid SAP landscapes.Required Consultant ExperienceMinimum of 10 years of SAP experience supporting ECC, BW, CRM, and transitioning to S/4HANA, BW/4HANA, and Fiori.Expertise in role-based access control for both technical and business end-users in S/4HANA and BW/4HANA.Proficient in Fiori/UI5 security design: catalogs, groups, OData services, and business roles.Experience troubleshooting Fiori authorization issues using SAP tools and SAP Notes.Strong hands-on skills in SAP security tools: SU24, SU25, SUIM, SU53, STAUTHTRACE.Implementation of BW/4HANA analysis authorizations and row-level data controls.Deep knowledge of SAP HANA DB security (including encryption, audit policies, and SQL-level controls).Integration of SAP with third-party IAM tools (e.g., Azure AD, SailPoint, Saviynt) via SCIM, SAML, OAuth, and IPS.Extensive experience with SAP BTP security across Launchpad Service, SAP Build Work Zone, CAP, and SAC.Configure and manage IAS/IPS for identity provisioning and SSO federation.Design secure hybrid architecture integrating on-prem SAP systems with BTP.GRC Access Control implementation (ARA, ARM, EAM) including SoD analysis and access review processes.Familiarity with IRS 1075 (FTI) and OCSE audit controls and compliance requirements.Duties and ResponsibilitiesDesign, develop, and maintain SAP roles and authorizations across S/4HANA, ECC, BW/4HANA, CRM, and Portal systems.Perform security readiness and impact assessments for migrations to S/4HANA and HANA DB platforms.Provide SAP Security support across all modules and landscapes (on-prem and cloud).Implement and support SAP Fiori/UI5 security including catalog, group, OData service, and semantic object configurations.Perform backend role design including transaction codes, Web Dynpro, CRM Web UI, and OData.Troubleshoot Fiori applications and perform error log analysis for missing services and backend authorizations.Configure and manage IAS/IPS for BTP authentication and provisioning and ensure secure identity federation.Maintain and support SAP GRC Access Control modules (ARA, ARM, EAM), including provisioning and access reviews.Conduct SoD risk analysis, support internal/external audits, and address compliance findings.HANA DB security including role design, encryption configuration, and audit policy implementation.Support integration with IAM platforms using SCIM, SAML 2.0, OAuth 2.0, and APIs.Establish secure trust and connectivity between SAP on-prem systems and BTP environments.Design and maintain hybrid identity architecture integrating AD, GRC, IAS/IPS, and SAP systems.Configure and support Central User Administration (CUA) and Single Sign-On (SSO).Perform system measurements and support SAP licensing audits.Review and revise SAP access roles to ensure separation of duties and compliance.Create and maintain security-related documentation including technical designs, SOPs, and audit artifacts.Support project managers with estimation, ticket tracking, and deliverables.Monitor security alerts and participate in remediation of EarlyWatch and security scan reports.Provide off-hours, weekend, holiday, and 24/7 on-call SAP Security support as required.Education and CertificationsBachelor’s degree in computer science, MIS, or related field (or equivalent work experience).Preferred: SAP System & Security Certifications, ITIL Foundation.Preferred Security Certifications: CISA or CISSP.Experience with Florida DOR CAMS or SUNTAX projects is a plus.