SAP Application Security Architect

Veriipro; Indianapolis (IN); On-site; USD 100,000 - 140,000; Full time

Job summary

Veriipro is seeking a seasoned SAP cybersecurity expert to lead initiatives across BTP, ECC, and S/4HANA environments. The role requires at least 10 years of experience in SAP, including 6+ years in security architecture and hands-on experience with tools like Onapsis.

The candidate will collaborate with multiple stakeholders, enforce access controls, and ensure compliance with enterprise security standards. Excellent communication is essential for working with both technical teams and non-technical stakeholders.

Qualifications

• 10+ years of SAP experience, with a minimum of 6 years in SAP security architecture and cybersecurity.
• Hands-on experience with SAP security monitoring tools like Onapsis.
• Strong understanding of SAP architecture and business processes.

Responsibilities

• Lead SAP cybersecurity initiatives across various SAP environments.
• Act as SAP Security Subject Matter Expert.
• Monitor, analyze, and manage security events and vulnerabilities.
• Collaborate with stakeholders to strengthen SAP security posture.
• Design and enforce role‑based access controls and authorization concepts.

Skills

SAP security architecture

Cybersecurity

SAP ECC

SAP S/4HANA

SAP BTP

Onapsis

Fiori

ABAP security concepts

SAP vulnerability management

Communication skills

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field

Tools

SAP security monitoring tools

SAP Basis

Job description

Ideal Candidate Profile

A strong candidate will typically have 10+ years of SAP experience, including 6+ years in SAP security architecture and cybersecurity across ECC/S/4HANA landscapes, with exposure to Fiori, HANA, and cloud-based SAP BTP environments, and hands‑on experience with SAP security monitoring tools such as Onapsis.

Roles and Responsibilities

• Lead SAP cybersecurity initiatives across SAP environments including BTP, ECC, S/4HANA, HANA, Fiori, and other SAP services.
• Act as SAP Security Subject Matter Expert (SME) with strong understanding of SAP architecture, components, and business processes.
• Monitor, analyze, and manage security events, vulnerabilities, risks, and threats within SAP systems.
• Perform SAP vulnerability management, risk assessments, remediation planning, and security reporting.
• Collaborate with ABAP, Basis, Information Security, Internal Audit, and business stakeholders to strengthen SAP security posture.
• Implement and support SAP security tools such as Onapsis and related security monitoring solutions.
• Support SAP security infrastructure upgrades, configuration changes, testing, and validation activities.
• Design and enforce SAP role‑based access controls (RBAC), segregation of duties (SoD), and authorization concepts.
• Prepare security documentation, architecture diagrams, risk assessments, and compliance reports.
• Support incident response, root cause analysis, and remediation of SAP security issues.
• Ensure adherence to enterprise security standards, audit requirements, and regulatory compliance.
• Provide guidance and oversight to technical teams during implementation and production support activities.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent experience).
• Strong experience in SAP security architecture and SAP application security administration.
• Hands‑on experience with SAP Basis configurations, ABAP security concepts, and Fiori security framework.
• Experience working across SAP ECC and S/4HANA environments.
• Strong knowledge of SAP HANA security concepts (database roles, privileges, encryption, auditing).
• Experience with SAP BTP security concepts (identity, authentication, authorization, trust configurations).
• Experience in SAP vulnerability management and security tools (Onapsis preferred).
• Strong understanding of SAP GRC concepts, SoD, and access control frameworks.
• Excellent communication skills and ability to work with technical and non‑technical stakeholders.