Consultant

We are seeking an experienced SAP S/4HANA Security Consultant with 4-7 years of hands-on expertise in SAP S/4HANA Public Cloud security to join our growing SAP practice. The successful candidate will be responsible for designing, implementing, and maintaining security and authorization frameworks for SAP S/4HANA Public Cloud environments, ensuring compliance with best practices, segregation of duties (SoD), and client-specific requirements.

Responsibilities

• Design and implement role-based authorization concepts for SAP S/4HANA Public Cloud using Business Roles, Business Catalogs, and Restriction Types.
• Configure and manage business users, business roles, and authorizations via the Identity Access Management (IAM) apps in Fiori Launchpad.
• Integrate SAP S/4HANA Public Cloud with SAP Cloud Identity Services (IAS/IPS) for single sign-on (SSO) and user provisioning.
• Perform Segregation of Duties (SoD) analysis and remediation; collaborate with GRC teams where applicable.
• Participate in all phases of SAP implementation (SAP Activate methodology): Discover, Prepare, Explore, Realize, Deploy, and Run.
• Conduct security workshops, requirements gathering, and user training sessions.
• Document security designs, role matrices, authorization concepts, and operational procedures.
• Troubleshoot and resolve authorization issues, working closely with functional and technical teams.
• Support audit and compliance activities, including SOX, GDPR, and internal control reviews.
• Stay current with SAPs quarterly release updates for Public Cloud and assess security impacts.

Qualifications

• 5+ years of SAP Security experience, with a minimum of 1–2 years in SAP S/4HANA Public Cloud security.

• Strong knowledge of Business Roles, Business Catalogs, Restrictions, and Spaces/Pages in S/4HANA Public Cloud.

• Experience with SAP Fiori Launchpad security and app-level authorizations.

• Hands-on experience with SAP Cloud Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).

• Understanding of SAP Activate methodology and cloud implementation lifecycle.

• Familiarity with SAP BTP (Business Technology Platform) security concepts.

• Knowledge of SoD frameworks and tools (e.g., SAP Access Control, Pathlock, or equivalent).

Excellent documentation, communication, and stakeholder management skills