SAP Security Consultant

Intuition IT Solutions Ltd; Leeds; On-site; GBP 70,000 - 110,000; Full time

Job summary

Intuition IT Solutions Ltd in Leeds is seeking an SAP Security expert to design and maintain SAP S/4HANA role concepts, configure Fiori security, and manage GRC Access Control. You will lead authorization projects and support system conversions.

The role also covers SAP BTP security, IAS/IPS integrations, SSO and OAuth, and ongoing access reviews. You will work with auditors and internal teams to enforce least-privilege and zero-trust principles across the SAP estate.

Qualifications

• Strong experience in SAP Security (ECC and S/4HANA)
• Hands-on expertise with SAP Fiori authorization concepts
• Solid working knowledge of SAP GRC Access Control
• Experience with SAP BTP security and cloud IAM
• Strong knowledge of authorization objects, roles, profiles
• Familiarity with SAP Basis and integration concepts
• Understanding of SoD, audit controls, and compliance frameworks

Responsibilities

• Design and maintain SAP S/4HANA role concepts (business roles, catalogs, groups) and perform user administration
• Configure and maintain SAP Fiori security (catalogs, groups, spaces, pages) and OData authorizations
• Implement and support GRC modules (ARA, ARM, EAM, BRM) and maintain SoD rules
• Configure BTP security (Global Account, Subaccounts) and IAS/IPS integration with IdPs
• Support Identity & Access management (SSO, SAML, OAuth 2.0) and access reviews
• Provide L3 security support, conduct cutovers and production go-lives
• Coordinate with auditors and compliance teams to meet SOX/GDPR requirements

Skills

SAP Security

Fiori authorization

GRC Access Control

BTP security

SSO / OAuth 2.0

SoD & compliance

Job description

SAP S/4HANA Security

• Design and maintain role concepts for S/4HANA (Business Roles, Catalogs, Groups)
• Perform user administration, role provisioning, and access reviews
• Conduct authorization troubleshooting (SU53, STAUTHTRACE)
• Support system conversions and upgrades (S/4)
• Implement best-practice authorization concepts (Fiori-first, business role-based)

SAP Fiori Security

• Configure and maintain Fiori catalogs, groups, spaces, and pages
• Manage OData service authorizations
• Integrate Fiori security with Back End S/4 authorizations
• Support Fiori launchpad security and performance issues

SAP GRC (Access Control)

• Implement and support GRC AC modules:
  • Access Risk Analysis (ARA)
  • Access Request Management (ARM)
  • Emergency Access Management (EAM/Firefighter)
  • Business Role Management (BRM)
• Maintain SoD rule sets, mitigating controls, and workflows
• Support audit and compliance requirements (SOX, GDPR, internal audits)
• Coordinate with auditors and compliance teams
• Configure GRC for SuccessFactors and ARIBA systems

SAP BTP Security

• Configure BTP security architecture (Global Account, Subaccounts)
• Manage Role Collections, authorization assignments, and trust configurations
• Integrate BTP with IAS/IPS and corporate IdPs (Azure AD, etc.)
• Secure BTP services (CAP, Integration Suite, Workflow, BAS)
• Support secure integration between S/4HANA and BTP applications

Identity & Access Management

• Integrate SAP systems with SSO, SAML, OAuth 2.0
• Support Identity life cycle management
• Enforce least-privilege and zero-trust security principles

Operations & Support

• Provide L3 security support
• Perform regular access reviews and cleanups activities
• Document security designs,SOPs, and controls
• Support cutovers, change transport management, and production go-lives

Required Skills & Experience

Technical Skills

• Strong experience in SAP Security (ECC and S/4HANA)
• Hands-on expertise with SAP Fiori authorization concepts
• Solid working knowledge of SAP GRC Access Control
• Experience with SAP BTP security and cloud IAM
• Strong knowledge of authorization objects, roles, profiles
• Familiarity with SAP Basis and integration concepts

Functional & Compliance Knowledge

• Understanding of SoD, audit controls, and compliance frameworks
• Experience working with internal/external auditors
• Ability to translate business requirements into secure role designs

Experience in SAP BDC, Datasphere, SAP Analytics Cloud and SAP SuccessFactors are desired.