SAP GRC Security HANA lead

Capgemini; Pune District, Chennai District, Bengaluru; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

Capgemini is seeking a SAP Security Specialist to design, build, and maintain security roles across SAP ECC/S/4HANA ABAP stacks. The role encompasses Fiori authorization setup, BTP security, and governance processes.

You will troubleshoot access issues, support identity lifecycle integrations, and collaborate with BASIS, development, and functional teams to ensure secure, compliant SAP landscapes.

Qualifications

• Design, develop, and maintain SAP security roles in ECC/S/4HANA ABAP stack.
• Configure and support Fiori catalog, group, and role authorization setup.
• Implement security baseline and hardening across SAP systems.

Responsibilities

• Design, build, and maintain SAP security roles in ECC/S/4HANA.
• Configure Fiori authorization and security concepts.
• Manage SAP BTP role collections and IAS/IPS configuration.
• Troubleshoot BTP access issues and identity propagation.
• Perform SoD analysis and governance activities.
• Collaborate with cross-functional teams for end-to-end security.

Skills

SAP Security

ABAP stack

Fiori security

GRC SoD

Identity & access

Tools

JIRA

ChaRM

SolDoc

Job description

Key Responsibilities

1. SAP Security Design & Build

• Design, develop, and maintain security roles in SAP ECC / S/4HANA (ABAP stack), including Single, Composite, and Derived roles.
• Build and manage SAP security concepts based on organizational structures, functional requirements, and SoD principles.
• Configure and support Fiori catalog, group, and role authorization setup.
• Implement security baseline and hardening activities across SAP systems.

2. SAP BTP & Cloud Security

• Design and manage SAP BTP role collections, IAS/IPS configuration, and identity lifecycle integrations.
• Support platform-level access management across BTP subaccounts, Cloud Foundry orgs, and spaces.
• Troubleshoot BTP application access issues, authentication flows, and identity propagation.
• Assist in enabling audit logs, security monitoring, and governance for SAP BTP landscapes.

3. Troubleshooting & Operations

• Analyze and resolve authorization failures across ABAP, Fiori, BTP, and cloud applications.
• Support user provisioning and access issue resolution in integrated landscapes (e.g., IAS, IPS, IAG, GRC AC).
• Perform SU53, STAUTHTRACE, SUIM analysis and provide root cause resolution.
• Coordinate with functional, development, and BASIS teams for end-to-end issue closure.

4. Governance, Compliance & SoD

• Conduct Segregation of Duties (SoD) analysis and support remediation activities.
• Work with GRC or IAG tools for Role Risk Analysis, firefighter access controls, and periodic review processes.
• Ensure compliance with internal and industry security standards, security baselines, and audit requirements.

5. Project Support & Documentation

• Participate in security blueprinting, requirement gathering workshops, and solution design discussions. (Tools used in JIRA, SolDoc, ChaRM)
• Create and maintain detailed documentation: role design, process flows, security standards, and operational runbooks.
• Support security deliverables across project phases: build, testing, deployment, hypercare.