SAP Authorization and Security Specialist

Boschgroup; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Boschgroup is seeking an SAP Security expert to drive security design and governance for S/4HANA migrations and rollouts. The role covers role design, GRC controls, Fiori security, and identity management across SAP systems.

You will collaborate with Basis and functional teams to ensure secure connectivity, perform SoD analyses, and support audit readiness during upgrades and go-lives.

Qualifications

• 4–6 years of SAP security experience.
• Experience with S/4HANA conversion and rollout security.
• Strong SoD risk analysis and remediation skills.
• Ability to document security processes and present findings.
• Experience coordinating with auditors and compliance teams.

Responsibilities

• Support S/4HANA security during conversion/upgrade from a security perspective.
• Analyze ECC roles and optimize to align with S/4HANA concepts.
• Design roles for new company codes, plants, regions during rollout.
• Maintain roles using PFCG aligned to org structure.
• Review SU24 defaults and authorization objects for migrations.
• Implement SAP Fiori security including catalogs and SSO.
• Perform SoD risk analysis and remediate conflicts with GRC Access Control.
• Configure and support GRC modules: ARA, ARM, EAM.
• Support role remediation during upgrade/rollout/post-go-live.
• Configure IAS for authentication, federation, and SSO.
• Configure IPS for automated provisioning between SAP and cloud apps.
• Support BTP security administration and IAS trust.
• Collaborate with Basis and infra teams for secure connectivity and federation.
• Support testing (unit/regression/UAT) during upgrades.
• Work with functional teams to resolve authorization issues.
• Assist in user provisioning and access requests during rollout.
• Support cutover, data migration, and post-go-live stabilization.
• Provide audit/compliance support and SoD reporting.

Skills

SAP Security

GRC Access Control

SoD analysis

Role redesign

S/4HANA security

Audit & compliance

Identity & access management

S/4HANA rollout

Education

BE, BTech, BCA, BSc (IT); MCA, MBA (IT); MSc(IT)

Tools

PFCG

SU24

GRC modules (ARA, ARM, EAM)

SAP BTP

IAS

IPS

OData service

Job description

Key Responsibilities & Required Skills

• Support SAP S/4HANA system conversion (Brownfield / Upgrade) activities from a security perspective, including impact assessment, role remediation, and authorization optimization.
• Analyze existing SAP ECC roles and authorizations and perform role redesign, remediation, and optimization to align with S/4HANA authorization concepts.
• Support SAP S/4HANA rollout projects by designing and adapting roles for new company codes, plants, sales organizations, or geographic regions while maintaining global security standards.
• Maintain and enhance single, derived, and composite roles using PFCG , ensuring alignment with organizational structure and business requirements.
• Review and update SU24 authorization defaults, authorization objects, and role menus as part of the S/4HANA conversion and rollout activities.
• Implement and support SAP Fiori security , including configuration of catalogs, spaces/pages, business roles, and OData service authorization .
• Perform Segregation of Duties (SoD) risk analysis and remediate access conflicts using SAP GRC Access Control .
• Configure and support SAP GRC modules , including Access Risk Analysis (ARA), Access Request Management (ARM), and Emergency Access Management (EAM) .
• Support role remediation and access risk mitigation activities during system upgrade, rollout, and post-go-live phases.
• Configure and support SAP Identity Authentication Service (IAS) for authentication policies, identity federation, and Single Sign-On (SSO) across SAP systems.
• Configure SAP Identity Provisioning Service (IPS) to enable automated user and role provisioning between SAP systems and cloud applications .
• Support SAP BTP security administration , including role collections, subaccount security configuration, and trust setup with IAS .
• Work with Basis and infrastructure teams to establish secure connectivity and identity federation between S/4HANA, SAP BTP, and other SAP cloud solutions .
• Support role testing, regression testing, and User Acceptance Testing (UAT) during upgrade and rollout phases.
• Collaborate with functional teams to resolve authorization issues arising from S/4HANA simplification items, new applications, or rollout-specific business requirements .
• Assist in user provisioning, role maintenance, and access request management during implementation and rollout phases.
• Support cutover activities, data migration phases, and post-go-live stabilization from a security perspective.
• Provide support for audit and compliance requirements , including SoD reporting, access reviews, and documentation of security controls.
• Recommend security optimization, role standardization, and governance improvements across the S/4HANA landscape.
• Strong verbal and written communication skills with the ability to effectively interact with business users, functional teams, and auditors on SAP Security and GRC related topics.
• Ability to clearly document security processes, role designs, and access control procedures, and present findings during access reviews, compliance discussions, and audit meetings.

Educational qualification:

BE, BTech, BCA, BSc (IT) MCA, MBA (IT) and MSc(IT)

Experience :

4 - 6 Years of Experience