SAP CFIN Basis & Security Architect

Innoverv Global; United States; Hybrid; USD 170,000 - 250,000; Full time

Job summary

Innoverv Global in the United States is seeking a Senior SAP Basis & Security Architect to own end-to-end SAP landscape design for S/4 HANA projects. You will define how systems are built, secured, and tuned for performance across greenfield and migration initiatives.

You will lead SAP security architecture, SoD governance, GRC solutions, HA/DR design, and integration security, collaborating with client CISOs and delivery teams to drive program success.

Qualifications

• Deep SAP Basis and security knowledge with large S/4 HANA implementations.
• Experience in SoD governance, access control, and SAP GRC.
• Strong stakeholder engagement with CISOs and IT leaders.

Responsibilities

• Architect end-to-end SAP Basis and technical landscape design for S/4 HANA projects.
• Lead SAP security architecture, role design, and SoD governance.
• Design SAP GRC solutions and ensure regulatory compliance.
• Oversee SAP HANA DB administration, HA/DR design, and performance tuning.
• Coordinate migrations, upgrades, and secure integrations with non-SAP systems.

Skills

SAP Basis administration

Security architecture

GRC design

S/4 HANA

Tools

GRC tools

Cloud platforms (AWS/AZURE/GCP)

Job description

SAP Basis & Security Architect

Every SAP transformation runs on something and you're the one who decides what that something looks like. As our SAP Basis & Security Architect, you'll be the technical authority on all Basis, landscape, and security design decisions across our S/4 HANA and Central Finance programmes. You'll define how systems are built, how they're secured, and how they perform from the first landscape design conversation through to go-live and beyond. You're the person the project calls when challenging technical questions need a definitive answer.

Location: Hybrid / Remote

Level: Senior Consultant / Associate Director

What you'll do

• Architect and own end-to-end SAP Basis and technical landscape design for S/4 HANA greenfield, brownfield programme implementations covering system sizing, landscape strategy, transport management, and infrastructure design
• Lead SAP Security architecture design defining role and authorisation frameworks, Segregation of Duties (SoD) governance, and access control strategies aligned to client risk and compliance requirements
• Design and govern SAP GRC (Governance, Risk & Compliance) solutions including Access Control, Process Control, and Risk Management ensuring audit-readiness and regulatory compliance across the programme
• Own technical architecture decisions for SAP HANA database administration, system performance tuning, high availability (HA), and disaster recovery (DR) design
• Lead system migration and upgrade planning S/4 HANA conversions, Unicode migrations, kernel upgrades, and support pack management coordinating with functional and integration workstream leads
• Define and govern SAP integration landscape security RFC connections, web services, API security, and secure connectivity between SAP and non-SAP systems
• Drive technical workshops with client IT and security teams, translating business risk requirements into technically sound SAP authorisation and basis architecture
• Manage and mentor a team of Basis and Security consultants across onshore and offshore delivery, ensuring quality and consistency of technical output
• Contribute to pre-sales and solutioning providing technical input to proposals, effort estimates, and client presentations for SAP transformation engagements

What you'll bring

• 10- 14 years of SAP Basis and Security experience, with a clear track record as a technical architect on large-scale S/4 HANA implementations or migrations
• Deep expertise in SAP Basis administration and architecture; system landscapes, transport management (CTS/ChaRM), SAP HANA DB administration, performance optimisation, HA/DR design, and cloud infrastructure (AWS, Azure, or GCP hosted SAP landscapes)
• Strong command of SAP Security design: role design and build, authorisation concept development, SoD analysis and remediation, and Fiori security (catalogues, groups, launchpad configuration)
• Hands-on experience with SAP GRC Access Control including ARA, ARM, EAM, and BRM modules ideally with exposure to Process Control and Risk Management
• Experience with SAP RISE / BTP infrastructure and cloud-hosted SAP environments is a strong advantage
• Familiarity with regulatory and compliance frameworks relevant to SAP security: SOX, GDPR, ISO 27001 and the ability to translate these into practical authorisation governance
• Demonstrated ability to manage and mentor technical teams across onshore and offshore delivery models
• Strong stakeholder engagement skills. Comfortable working with client CISOs, IT Directors, and programme leadership on technical risk and architecture decisions
• SAP Certified Technology Associate in SAP HANA or SAP S/4 HANA System Administration preferred; CISSP, CISM, or equivalent security qualification is a plus
• In-depth understanding of:

End-to-end SAP Basis and technical landscape design

SAP integration landscape security

SAP HANA database administration: performance tuning, high

availability (HA), and disaster recovery (DR) design

Regulatory and compliance frameworks relevant to SAP security: SOX,

GDPR, ISO 2700

SAP RISE / BTP infrastructure and cloud-hosted SAP environments;

experience here is a strong advantage

What we offer

• Competitive salary + performance bonus tied to project and client outcomes
• Exposure to complex global S/4 HANA and Central Finance programmes across multiple industries
• A pivotal technical role with genuine architectural ownership and not ticket-based support but programme-shaping design leadership
• Close collaboration with functional and integration architects, with visibility at the highest levels of programme delivery
• Dedicated learning budget to stay current on SAP RISE, BTP, cloud security, and emerging SAP technical capabilities
• Flexible, remote working with a high-trust, outcomes-first culture