SAP GRC Security / S/4HANA with IAG, IAS & IPS

Connexions; Karnataka; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Connexions in Pan India is seeking a Senior SAP GRC Security professional with 8+ years of hands-on SAP Security, SAP GRC Access Control and S/4HANA security. You will design secure roles, implement access governance, and manage identity lifecycle across cloud and on‑premise SAP environments, including IAG, IAS and IPS, with SSO and federation capabilities.

This C2H on-site role requires deep SoD knowledge, experience with ARA/ARM/BRM/EAM, SAP Fiori security, and the ability to coordinate across

Qualifications

• 8+ years of SAP Security / SAP GRC experience.
• Hands-on SAP GRC Access Control (GRC 10.x/12.x).
• Experience in ARA, ARM, BRM and EAM.
• S/4HANA security and authorization experience.
• Experience with SAP IAG, IAS and IPS.
• Knowledge of SAP role design and user provisioning.
• Understanding SoD and risk remediation.
• Experience with SAP Fiori security and S/4HANA roles.
• Integrating SAP GRC/IAG with SAP and non-SAP systems.
• Knowledge of SSO, SAML/OIDC and identity federation.

Responsibilities

• Design, configure and maintain SAP security roles and authorizations for SAP S/4HANA and related SAP apps.
• Configure and support SAP GRC Access Control modules: ARA, ARM, BRM, EAM.
• Design and maintain SoD rulesets, critical access rules, mitigating controls, risk analysis.
• Configure and support SAP IAG for access requests, access analysis, role management and lifecycle.
• Manage SAP IAS and IPS integrations and provisioning flows across cloud/on-premise SAP environments.
• Configure identity federation, SSO and automated user provisioning.
• Support SAP BTP security concepts including trust configuration, role collections and identity integration.
• Design and troubleshoot SAP Fiori security, catalogs, spaces/pages, business roles and authorizations.
• Monitor and troubleshoot authentication, provisioning, synchronization and integration issues across IAG/IAS/IPS.
• Support user access reviews, security assessments, audit requests and remediation.
• Prepare solution documents, configuration documents, test cases and procedures.
• Participate in implementation, enhancement, upgrade, testing, cutover, go-live and hypercare.

Skills

SAP GRC Access Control

S/4HANA Security

IAG (Identity Access Governance)

IAS/IPS SAP Cloud Identity Services

SoD & risk analysis

SSO / SAML / OIDC

Fiori Security

GRC implementation & upgrades

Stakeholder management

Documentation & test cases

Tools

Azure AD/Entra ID

Okta

SailPoint

SAP IDM

Job description

Experience: 8+ years

Job Role: C2H

Work Mode: 5days (WFO- On site)

Location: Pan India

Role Overview

We are seeking a Senior SAP GRC Security professional with strong hands-on experience in SAP Security, SAP GRC Access Control and SAP S/4HANA security, along with practical experience in SAP Identity Access Governance (IAG) and SAP Cloud Identity Services, including IAS and IPS. The consultant will be responsible for secure role design, access governance, identity lifecycle, cloud/on-premise integration, risk management and audit compliance across SAP landscapes.

Key Responsibilities

• Design, configure and maintain SAP security roles and authorizations for SAP S/4HANA and related SAP applications.
• Configure and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM) and Emergency Access Management (EAM).
• Design and maintain Segregation of Duties (SoD) rulesets, critical access rules, mitigating controls, risk analysis and remediation processes.
• Configure and support SAP IAG for access requests, access analysis, role management, access certifications and identity lifecycle processes.
• Manage SAP IAS and IPS integrations and provisioning flows between SAP cloud services, S/4HANA and other target applications.
• Configure identity federation, SSO and automated user provisioning across cloud and on-premise SAP environments.
• Support SAP BTP security concepts including trust configuration, role collections and identity integration.
• Design and troubleshoot SAP Fiori security, catalogs, spaces/pages, business roles and authorizations.
• Monitor and troubleshoot authentication, provisioning, synchronization and integration issues across IAG/IAS/IPS.
• Support user access reviews, security assessments, audit requests and compliance remediation.
• Prepare solution documents, configuration documents, test cases and operational procedures.
• Participate in implementation, enhancement, upgrade, testing, cutover, go-live and hypercare activities.

Mandatory Skills & Experience

• 8+ years of relevant SAP Security / SAP GRC experience.
• Strong hands-on experience in SAP GRC Access Control, preferably GRC 10.x/12.x.
• Strong experience in ARA, ARM, BRM and EAM.
• Strong SAP S/4HANA security and authorization experience.
• Hands-on experience with SAP IAG.
• Hands-on experience with SAP IAS and IPS / SAP Cloud Identity Services.
• Strong knowledge of SAP role design, authorization concepts, user administration and access provisioning.
• Strong understanding of SoD, critical access, risk analysis, mitigation and remediation.
• Experience with SAP Fiori security and S/4HANA business roles.
• Experience integrating SAP GRC/IAG with SAP and non-SAP target systems.
• Good understanding of SSO, SAML/OIDC and identity federation concepts.
• Strong troubleshooting, documentation and stakeholder-management skills.

Good to Have

• SAP BTP Security and Identity Services.
• S/4HANA Cloud and SAP cloud application security.
• Azure AD/Entra ID, Okta or similar enterprise IdP integration.
• SailPoint, SAP IDM or other IAM/IGA platforms.
• SAP HANA database security.
• S/4HANA implementation, conversion or role redesign experience.
• SOX/ITGC or equivalent audit and compliance experience.