SAP S/4HANA RBAC Security Architect

Compugen Inc; Rankin; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Job summary

Compugen is seeking an experienced SAP S/4HANA RBAC Security Consultant to lead the design, configuration, and ongoing management of roles, permissions, and authorizations within an SAP S/4HANA environment. You will partner with the implementation vendor to design the RBAC model, translate business requirements into SAP structures, and ensure governance and knowledge transfer.

The role includes role testing, troubleshooting, SoD risk management, and post-go-live support, with ongoing ownership

Qualifications

• Strong hands-on experience with SAP S/4HANA Security and Role-Based Access Control (RBAC).
• Demonstrated experience designing, building, and maintaining SAP roles and authorizations.
• Strong knowledge of SAP authorization concepts, authorization objects, profiles, and role design.
• Hands-on experience with SAP PFCG and SAP role administration.
• Experience designing and implementing RBAC models based on business functions and job responsibilities.
• Experience troubleshooting SAP authorization issues using tools such as SU53, STAUTHTRACE, SUIM, or equivalent.
• Strong understanding of Segregation of Duties (SoD) and access governance principles.
• Experience supporting an SAP S/4HANA implementation or migration.
• Experience working alongside SAP systems integrators or implementation partners.
• Ability to review, validate, and challenge role and security configurations developed by third parties.
• Experience supporting role testing, UAT, cutover, go-live, and post-production support.
• Strong documentation and knowledge-transfer skills.
• Excellent verbal and written communication skills in English.

Responsibilities

• Work directly with the SAP implementation partner on the design, configuration, and implementation of the S/4HANA RBAC model.
• Configure and maintain SAP roles, permissions, authorizations, profiles, and authorization objects.
• Design and maintain business and technical roles aligned with business functions and job responsibilities.
• Translate business access requirements into appropriate SAP role and authorization structures.
• Review and validate role configurations developed by the implementation partner to ensure they meet business and security requirements.
• Support the development of single, composite, derived, and business roles, where applicable.
• Configure and support SAP Fiori roles, catalogs, spaces/pages, and associated authorizations.
• Perform role testing and authorization validation throughout the implementation lifecycle.
• Troubleshoot authorization and access issues and identify missing or excessive permissions.
• Support user provisioning, role assignment, role changes, and access removal processes.
• Identify and manage Segregation of Duties (SoD) conflicts and other access-related risks.
• Support security and access requirements during system testing, UAT, cutover, go-live, and post-production stabilization.
• Participate in periodic access reviews, role recertification, security audits, and compliance activities.
• Establish and maintain RBAC standards, naming conventions, documentation, and governance processes.
• Ensure appropriate documentation and knowledge transfer from the implementation partner prior to project completion.
• Take ownership of the SAP S/4HANA RBAC environment following implementation.
• Maintain and enhance roles as business processes, organizational structures, and security requirements evolve.
• Collaborate with SAP functional teams, technical teams, IAM/security teams, business stakeholders, and external implementation partners.

Skills

SAP S/4HANA RBAC

RBAC design

Role-based access governance

RBAC testing and validation

SOD and access control

Documentation and knowledge transfer

Tools

SAP PFCG

SU53

STAUTHTRACE

SUIM

Job description

Compugen is seeking an experienced SAP S/4HANA RBAC Security Consultant to lead the design, configuration, and ongoing management of roles, permissions, and authorizations within an SAP S/4HANA environment. You will partner with the implementation vendor to design the RBAC model, translate business requirements into SAP structures, and ensure governance and knowledge transfer.

The role includes role testing, troubleshooting, SoD risk management, and post-go-live support, with ongoing ownership