Principal Consultant | SAP Technical | SAP Security

Expedite Talent Solutions; Irving (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Expedite Talent Solutions in Irving, TX is seeking a Principal SAP Security Consultant to drive security design, implementation, and governance across SAP landscapes.

The role requires hands-on experience in SAP S/4HANA Security, Fiori Security, GRC, and SoD, with collaboration across stakeholders and audit teams.

Qualifications

• Bachelor's degree in CS/IT or related field.
• SAP Security and GRC certifications preferred.
• 10+ years of experience with SAP security and S/4HANA implementations.

Responsibilities

• Design SAP security roles and authorization concepts across SAP S/4HANA environments.
• Configure SAP authorization objects and Fiori security components.
• Lead SoD assessments and remediation with stakeholders.
• Support audits with access reports and BRM/ARM/ARA workflows.

Skills

SAP Security

S/4HANA Security

GRC Access Control

User Administration

Segregation of Duties (SoD)

PFCG Configuration

Fiori Security

Audit & Compliance

Access Governance

Troubleshooting

Education

Bachelor's Degree in CS/IT

SAP GRC Certifications

Tools

SU53

ST01

SUIM

PFCG

STAUTHTRACE

Security Audit Logs

Job description

Job title: Principal Consultant

Work Location: Irving, TX - 75039

Vendor Rate: ***$

Minimum years of experience: 10+

Would you require the candidates to meet you for in person interview? Yes

Is Skype/WebEx interview, OK? Ok

Is this onsite/remote position: Hybrid

If onsite, will you be considering relocation candidates: Yes

Does this position require Visa independent candidates only? Yes

Job Description:

We are looking for an experienced SAP S/4HANA Security Consultant to join our SAP team and drive security design, implementation, and governance initiatives across SAP landscapes. The ideal candidate will possess strong expertise in SAP Security and Authorizations, SAP S/4HANA Security, SAP Fiori Security, and SAP GRC Access Control. The role requires hands‑on experience in designing authorization concepts, implementing role‑based access controls, ensuring Segregation of Duties (SoD) compliance, and supporting security requirements across SAP transformation programs.

The consultant will work closely with business stakeholders, functional consultants, auditors, BASIS teams, and project managers to ensure secure and compliant access management within SAP S/4HANA environments. The candidate should have a thorough understanding of SAP security architecture, risk management processes, audit controls, and access governance frameworks.

Key Responsibilities

• Design, develop, and maintain SAP security roles and authorization concepts across SAP S/4HANA environments in alignment with business and compliance requirements.
• Configure and support SAP authorization objects, composite roles, single roles, derived roles, and organizational level restrictions to enforce secure access controls.
• Perform end-to-end user administration activities including user provisioning, modifications, role assignments, and deprovisioning while adhering to established security policies.
• Lead security design workshops with business and functional teams to gather access requirements and translate them into scalable security solutions.
• Implement and manage SAP Fiori security components including catalogs, groups, spaces, pages, OData services, and launchpad authorizations.
• Support embedded analytics, CDS views, and SAP Gateway security requirements within S/4HANA landscapes.
• Conduct Segregation of Duties (SoD) assessments and collaborate with business stakeholders to identify, mitigate, and remediate security risks.
• Work extensively with SAP GRC Access Control modules such as Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Perform periodic user access reviews, role rationalization activities, and compliance assessments to support corporate governance requirements.
• Monitor and investigate authorization issues using tools such as SU53, ST01, STAUTHTRACE, SUIM, PFCG, and security audit logs.
• Support internal and external audit activities by providing security documentation, access reports, role matrices, SoD analysis reports, and compliance evidence.
• Collaborate with SAP Basis, Functional, ABAP, Integration, and Infrastructure teams to address complex authorization and security‑related challenges.
• Participate in SAP implementation, rollout, upgrade, migration, and S/4HANA transformation initiatives to ensure secure deployment and access governance.
• Develop and maintain security standards, naming conventions, role design guidelines, and access control procedures.
• Evaluate new SAP products and technologies to ensure security requirements are integrated into enterprise architecture and business processes.

Required Technical Skills

• SAP Security & Authorization
• SAP Security and Authorizations
• SAP S/4HANA Security
• SAP ECC Security:
• User and Role Administration
• Authorization Concept Design
• Role Build and Role Maintenance
• Organizational Level Security
• PFCG Configuration
• SAP Fiori Security:
• Fiori Catalogs, Groups, Spaces, and Pages
• SAP Launchpad Security
• OData Service Authorizations
• SAP Gateway Security
• CDS View Authorization Concepts
• Embedded Analytics Security
• SAP GRC & Compliance:
• SAP GRC Access Control
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Segregation of Duties (SoD)
• Audit and Compliance Controls
• Access Governance and Risk Management
• Troubleshooting & Monitoring:
• SU53
• SUIM
• PFCG
• ST01 Trace
• STAUTHTRACE
• Security Audit Log
• Authorization Analysis and Remediation

Preferred Skills

• SAP BTP Security
• SAP IAS and IPS
• SAP Cloud Identity Services
• SAP MDG Security
• SAP Ariba Security
• SAP SuccessFactors Security
• SAP BW/4HANA Security
• SAP Analytics Cloud (SAC) Security
• SAP Solution Manager and ChaRM
• Identity and Access Management (IAM) Solutions

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related discipline.
• Relevant SAP Security and SAP GRC certifications are preferred.
• Proven experience supporting global SAP implementation, rollout, support, or transformation programs.
• Experience working in regulated environments with stringent compliance and audit requirements will be an added advantage.

Desired Candidate Profile

The ideal candidate should demonstrate strong technical expertise in SAP Security and S/4HANA authorization frameworks, coupled with a solid understanding of compliance, audit, and risk management requirements. The individual should be capable of working across multiple SAP modules and collaborating with cross‑functional teams to implement secure, scalable, and compliant access solutions. Strong analytical skills, problem‑solving capabilities, stakeholder management, and communication skills are essential for success in this role.

Custom Fields:

Name: Intake Call Requested

Value: true

Name: Intake Call Completed

Value: true