Senior Sap Security Consultant

Arohak Technologies; Hyderabad; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Arohak Technologies is seeking an experienced SAP Security Sr. consultant to design, implement, and support secure access across the SAP landscape.

You will work with process owners, functional teams, Basis, and compliance to deliver least-privilege, role-based access that supports business controls. Key responsibilities include designing roles with PFCG, configuring Fiori access, and performing security testing.

Qualifications

• 8+ years of SAP Security experience with S/4HANA backgrounds.
• Strong knowledge of SAP authorization concepts and role administration.
• Experience securing SAP Fiori and troubleshooting access across components.
• Familiarity with GRC Access Control and audit requirements.

Responsibilities

• Design, build, test, and maintain SAP S/4HANA roles using PFCG.
• Translate business processes into authorization designs based on least privilege.
• Configure Fiori access, catalogs, spaces, pages, and OData authorizations.
• Analyze authorization issues using SU53, STAUTHTRACE, SUIM.
• Support S/4HANA implementations, upgrades, and rollouts, including SU24/SU25 tasks.
• Identify and remediate segregation-of-duties risks with business/compliance.
• Support user provisioning, access reviews, and SAP GRC processes.
• Coordinate security transports, role testing, UAT, and production deployment.
• Maintain security design docs, role matrices, and audit evidence.
• Resolve security incidents and propose access-control improvements.

Skills

SAP Security

S/4HANA

PFCG

Fiori

GRC Access Control

SAP HANA

SU53

SUIM

Education

Bachelor's degree in IT/CS

Tools

SU24

SU25

STAUTHTRACE

Job description

SAP Security Sr. consultant - Offshore

S/4HANA Security Consultant to design, implement, and support secure access across our SAP landscape. This role will work with business process owners, functional teams, Basis, and compliance stakeholders to deliver role-based access that supports business operations and internal controls.

Key responsibilities

• Design, build, test, and maintain SAP S/4HANA business, single, composite, and derived roles using PFCG.
• Gather access requirements and translate business processes into authorization designs based on least-privilege principles.
• Configure and troubleshoot SAP Fiori access, including business roles, catalogs, spaces, pages, and underlying OData service authorizations.
• Analyze authorization issues using SU53, STAUTHTRACE, SUIM, and related tools.
• Support S/4HANA implementations, conversions, upgrades, and rollouts, including SU24 authorization proposal maintenance and SU25 upgrade activities.
• Identify and remediate segregation-of-duties conflicts and sensitive access risks in collaboration with business and compliance teams.
• Support user provisioning, access reviews, emergency access, and SAP GRC Access Control processes where deployed.
• Coordinate security transports, role testing, user acceptance testing, and production deployment.
• Maintain security design documents, role matrices, procedures, and audit evidence.
• Resolve security incidents and service requests, and recommend improvements to access controls.

Required qualifications

• Bachelors degree in information technology, computer science, or a related field, or equivalent practical experience.
• At least 8 years of SAP Security experience, including hands-on role design and support in SAP S/4HANA.
• Strong knowledge of SAP authorization concepts, authorization objects, organizational levels, and role administration.
• Experience securing SAP Fiori applications and troubleshooting access across front-end and back-end components.
• Working knowledge of segregation of duties, sensitive access controls, and audit requirements.
• Experience supporting security across relevant SAP business processes, such as finance, procurement, sales, or manufacturing.
• Strong analytical, documentation, and stakeholder communication skills.

Preferred qualifications

• Experience with SAP GRC Access Control, including Access Risk Analysis, Access Request Management, and Emergency Access Management.
• Participation in at least one full-cycle SAP S/4HANA implementation or conversion.
• Familiarity with SAP BTP security, SAP Cloud Identity Services, single sign-on, and identity provider integration.
• Knowledge of SAP HANA database security and analytical authorizations.
• Relevant SAP certification.