SAP BASIS Security Engineer & Access Control Expert

PlanIT Group, LLC; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

PlanIT Group, LLC is seeking a SAP BASIS Security Engineer / Administrator in the United States. The role focuses on SAP security foundations, role design, GRC controls, and Fiori/S/4HANA security across multiple SAP components.

You will manage user provisioning, SSO, and security authorizations while collaborating with basis, audit, and IT security teams. Responsibilities include role maintenance, incident response, regulatory compliance, and integration with SAP Cloud Platform.

Qualifications

• Experience securing SAP environments including ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, and SuccessFactors.
• Ability to design, build, and maintain SAP security roles with focus on Fiori authorizations across frontend and backend systems.
• Experience with SAP GRC Access Risk Analysis, BRM, and EAM for governance and risk management.
• Knowledge of GDPR, SOX, ISO 27001 and other regulatory requirements; audit-ready documentation.
• Experience with SAP Cloud Platform and SAP BTP security services.

Responsibilities

• Design, build, and maintain composite and single SAP security roles; conduct deduplication and SoD analysis.
• Provision users, enforce password policies, and enable SSO (Kerberos, SAML, OAuth).
• Activate and manage security authorizations for backend OData services used by Fiori apps.
• Monitor security alerts and respond to incidents; coordinate with IT security for patching and hardening.
• Create and maintain documentation for policies, role designs, and procedures; liaise with audit, basis, and functional teams.

Skills

SAP Security Foundations

SAP authorizations

SAP NetWeaver security

GRC knowledge (Access Control, Process

S/4HANA & Fiori Security

Identity & Access Management

SoD analysis

Tools

SU01

PFCG

SU24

SU53

ST01

CTS/STMS

Fiori Catalogs/Groups/Spaces

Job description

PlanIT Group, LLC is seeking a SAP BASIS Security Engineer / Administrator in the United States. The role focuses on SAP security foundations, role design, GRC controls, and Fiori/S/4HANA security across multiple SAP components.

You will manage user provisioning, SSO, and security authorizations while collaborating with basis, audit, and IT security teams. Responsibilities include role maintenance, incident response, regulatory compliance, and integration with SAP Cloud Platform.