SAP S/4HANA RBAC Security Consultant - Contract

Compugen Inc; Rankin; On-site; CAD 90,000 - 130,000; Full time

Benefits offered by this job

Job summary

Compugen is seeking an experienced SAP S/4HANA RBAC Security Consultant to lead the design, configuration, and ongoing management of roles, permissions, and authorizations within an SAP S/4HANA environment. You will partner with the implementation vendor to design the RBAC model, translate business requirements into SAP structures, and ensure governance and knowledge transfer.

The role includes role testing, troubleshooting, SoD risk management, and post-go-live support, with ongoing ownership

Qualifications

• Strong hands-on experience with SAP S/4HANA Security and Role-Based Access Control (RBAC).
• Demonstrated experience designing, building, and maintaining SAP roles and authorizations.
• Strong knowledge of SAP authorization concepts, authorization objects, profiles, and role design.
• Hands-on experience with SAP PFCG and SAP role administration.
• Experience designing and implementing RBAC models based on business functions and job responsibilities.
• Experience troubleshooting SAP authorization issues using tools such as SU53, STAUTHTRACE, SUIM, or equivalent.
• Strong understanding of Segregation of Duties (SoD) and access governance principles.
• Experience supporting an SAP S/4HANA implementation or migration.
• Experience working alongside SAP systems integrators or implementation partners.
• Ability to review, validate, and challenge role and security configurations developed by third parties.
• Experience supporting role testing, UAT, cutover, go-live, and post-production support.
• Strong documentation and knowledge-transfer skills.
• Excellent verbal and written communication skills in English.

Responsibilities

• Work directly with the SAP implementation partner on the design, configuration, and implementation of the S/4HANA RBAC model.
• Configure and maintain SAP roles, permissions, authorizations, profiles, and authorization objects.
• Design and maintain business and technical roles aligned with business functions and job responsibilities.
• Translate business access requirements into appropriate SAP role and authorization structures.
• Review and validate role configurations developed by the implementation partner to ensure they meet business and security requirements.
• Support the development of single, composite, derived, and business roles, where applicable.
• Configure and support SAP Fiori roles, catalogs, spaces/pages, and associated authorizations.
• Perform role testing and authorization validation throughout the implementation lifecycle.
• Troubleshoot authorization and access issues and identify missing or excessive permissions.
• Support user provisioning, role assignment, role changes, and access removal processes.
• Identify and manage Segregation of Duties (SoD) conflicts and other access-related risks.
• Support security and access requirements during system testing, UAT, cutover, go-live, and post-production stabilization.
• Participate in periodic access reviews, role recertification, security audits, and compliance activities.
• Establish and maintain RBAC standards, naming conventions, documentation, and governance processes.
• Ensure appropriate documentation and knowledge transfer from the implementation partner prior to project completion.
• Take ownership of the SAP S/4HANA RBAC environment following implementation.
• Maintain and enhance roles as business processes, organizational structures, and security requirements evolve.
• Collaborate with SAP functional teams, technical teams, IAM/security teams, business stakeholders, and external implementation partners.

Skills

SAP S/4HANA RBAC

RBAC design

Role-based access governance

RBAC testing and validation

SOD and access control

Documentation and knowledge transfer

Tools

SAP PFCG

SU53

STAUTHTRACE

SUIM

Job description

About Compugen

Compugen is Canada's largest privately-owned Technology Ally. To innovate industries, transform businesses, connect communities, and drive meaningful change, we must think bigger, reach broader, and act bolder. Through knowledge, curiosity, and collaboration, Compugen helps organizations delivering experience by design. This is what it means to be human-centered and technology-enabled.

Dreaming, designing, and delivering isn't just a mantra for us - it's a way of life. We believe that technology is the conduit, but our people – they are the connection that truly makes the magic happen!

Our Culture

We are a human-centered culture where we prioritize your well-being and are invested in helping you reach your fullest potential. We're not only focused on achieving our goals - we're dedicated to helping you achieve yours.

If you're relentlessly curious, driven to make a difference, and collaborative at the core, then you belong with us.

Position Overview:

We are seeking an experienced SAP S/4HANA RBAC Security Consultant to support the implementation and ongoing management of Role-Based Access Control (RBAC), roles, permissions, and authorizations within an SAP S/4HANA environment.

The organization is currently working with an SAP implementation partner responsible for the S/4HANA implementation, including the initial configuration of roles and role-based access. This resource will work closely alongside the integrator during the implementation to provide internal expertise, participate in the design and configuration of the RBAC model, and ensure appropriate knowledge transfer.

Following implementation, the consultant will take ownership of the SAP RBAC and security environment, including ongoing role configuration, access management, troubleshooting, governance, and continuous improvement.

Key Responsibilities:

• Work directly with the SAP implementation partner on the design, configuration, and implementation of the S/4HANA RBAC model.
• Configure and maintain SAP roles, permissions, authorizations, profiles, and authorization objects.
• Design and maintain business and technical roles aligned with business functions and job responsibilities.
• Translate business access requirements into appropriate SAP role and authorization structures.
• Review and validate role configurations developed by the implementation partner to ensure they meet business and security requirements.
• Support the development of single, composite, derived, and business roles, where applicable.
• Configure and support SAP Fiori roles, catalogs, spaces/pages, and associated authorizations.
• Perform role testing and authorization validation throughout the implementation lifecycle.
• Troubleshoot authorization and access issues and identify missing or excessive permissions.
• Support user provisioning, role assignment, role changes, and access removal processes.
• Identify and manage Segregation of Duties (SoD) conflicts and other access-related risks.
• Support security and access requirements during system testing, UAT, cutover, go-live, and post-production stabilization.
• Participate in periodic access reviews, role recertification, security audits, and compliance activities.
• Establish and maintain RBAC standards, naming conventions, documentation, and governance processes.
• Ensure appropriate documentation and knowledge transfer from the implementation partner prior to project completion.
• Take ownership of the SAP S/4HANA RBAC environment following implementation.
• Maintain and enhance roles as business processes, organizational structures, and security requirements evolve.
• Collaborate with SAP functional teams, technical teams, IAM/security teams, business stakeholders, and external implementation partners.

Skills & Qualifications:

• Strong hands-on experience with SAP S/4HANA Security and Role-Based Access Control (RBAC).
• Demonstrated experience designing, building, and maintaining SAP roles and authorizations.
• Strong knowledge of SAP authorization concepts, authorization objects, profiles, and role design.
• Hands-on experience with SAP PFCG and SAP role administration.
• Experience designing and implementing RBAC models based on business functions and job responsibilities.
• Experience troubleshooting SAP authorization issues using tools such as SU53, STAUTHTRACE, SUIM, or equivalent.
• Strong understanding of Segregation of Duties (SoD) and access governance principles.
• Experience supporting an SAP S/4HANA implementation or migration.
• Experience working alongside SAP systems integrators or implementation partners.
• Ability to review, validate, and challenge role and security configurations developed by third parties.
• Experience supporting role testing, UAT, cutover, go-live, and post-production support.
• Strong documentation and knowledge-transfer skills.
• Excellent verbal and written communication skills in English.

Preferred Qualifications

• Experience with SAP Fiori security and authorization concepts, including catalogs, spaces/pages, and business roles.
• Experience with SAP GRC Access Control and/or SAP Identity Access Governance (IAG).
• Knowledge of SAP user provisioning and identity lifecycle management.
• Experience integrating SAP access management with enterprise Identity and Access Management (IAM) solutions.
• Experience supporting security audits, access certifications, and compliance requirements.
• Experience transitioning SAP security responsibilities from a systems integrator to an internal support team.

Equity Statement

At Compugen, we are committed to diversity, equity and inclusion. We actively recruit from all groups, including women, Indigenous people, persons with disabilities and members of visible minorities. We recognize the importance of removing barriers to participation and provide accommodation upon request to all applicants throughout the recruitment process. If you require an accommodation, our People & Culture representative will work with you to meet your needs in a confidential and respectful manner. We believe everyone deserves a seat at the table- and we are taking deliberate action to make this a reality

#ITR #CompugenITR