SAP S/4HANA Security Architecture and Implementation Consultant

Trigyn Technologies Limited; New York (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

TRIGYN TECHNOLOGIES, INC. is seeking an SAP Security Architecture Consultant to design and govern security across SAP S/4HANA projects for a global client base.

You will lead authorization design, Fiori security, and integration with SAP BTP, IAS/IPS, Entra ID and SSO, working with Process Owners, Basis, Infrastructure and EA teams. 10+ years in SAP security architecture, multiple SAP ERP/S4HANA implementations, and strong executive communication are required.

Qualifications

• Minimum 10 years of SAP Security architecture, implementation and support.
• Three full lifecycle SAP ERP or SAP S/4HANA implementations.
• Strong expertise in SAP S/4HANA Authorization concepts and security.
• Experience with Fiori, Gateway, CDS, OData and embedded analytics.

Responsibilities

• Design and implement SAP S/4HANA security architecture for Greenfield and Brownfield projects.
• Define enterprise authorization strategy across SAP modules including Finance, Procurement, Logistics, SCM and HCM.
• Develop role design methodology based on SAP Best Practices and Fiori catalogs.
• Lead redesign of SAP ECC security into SAP S/4HANA security.
• Design SAP Fiori Launchpad security including catalogs, spaces and pages.
• Design authorization concepts for CDS Views and SAP Gateway services.
• Define SoD requirements with GRC teams and perform risk assessments.
• Develop security architecture for SAP BTP integrations.
• Support security testing and production cutover activities.
• Provide knowledge transfer and mentoring to SAP Security administrators.

Skills

SAP Security Architecture

S/4HANA Security

Fiori Security

OData Security

SSO (SAML / OAuth)

BTP Security

Identity Management

SoD & GRC

SAP Activate

Tools

SAP Fiori

SAP Gateway

CDS

OData

SAML 2.0

OAuth

SAP BTP

IAS/IPS

Entra ID

Job description

Background

Our client's ERP system is a continuous organizational transformation, enabling high-quality and cost-effective service delivery for evolving United Nations mandates worldwide. Through modernization of business processes and technologies, the system continues to evolve its SAP landscape with the implementation of SAP S/4HANA and related cloud solutions. The SAP S/4HANA Security Architecture Consultant will support the design, implementation and governance of SAP security across the S/4HANA project. The consultant will work closely with business process owners, functional consultants, Basis, Infrastructure, Cybersecurity and Enterprise Architecture teams to ensure that security is designed and implemented in accordance with SAP and the organization.

Responsibilities

• Design and implement SAP S/4HANA security architecture for Greenfield and Brownfield implementation projects.
• Define enterprise authorization strategy across SAP S/4HANA modules including Finance, Procurement, Logistics, Supply Chain and HCM.
• Develop role design methodology based on SAP Best Practices and Fiori business catalogs.
• Lead redesign of SAP ECC security into SAP S/4HANA security utilizing a Greenfield approach where appropriate.
• Design and implement SAP Fiori Launchpad security including catalogs, spaces, pages, business roles and business catalogs.
• Design authorization concepts for embedded analytics, CDS Views and SAP Gateway services.
• Define Segregation of Duties (SoD) requirements together with Governance, Risk and Compliance teams.
• Develop security architecture for SAP Business Technology Platform (BTP) integrations where required.
• Support integration security involving SAP Cloud ALM, Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Microsoft Entra ID and Single Sign-On.
• Perform security architecture reviews throughout Design, Build, Test and Deploy phases.
• Conduct security risk assessments and recommend mitigation strategies.
• Support security-related testing including Unit Testing, Integration Testing, User Acceptance Testing and Production Cutover.
• Develop security standards, procedures, technical documentation and operational guides.
• Provide knowledge transfer and mentoring to internal SAP Security administrators.

Required Experience and Skills

A minimum of 10 years of progressively responsible experience in SAP Security architecture, implementation and support, including:

• Minimum three full lifecycle SAP ERP or SAP S/4HANA implementations.
• Strong expertise in SAP S/4HANA Authorization Concept.
• Extensive experience with:
  • SAP Fiori Security
  • SAP Gateway Security
  • CDS Authorization
  • OData Security
  • Embedded Analytics
• Experience designing Fiori Spaces and Pages.
• Experience designing SAP Business Roles and Business Catalogs.
• Strong understanding of SAP authorization objects and organizational level security.
• Experience with SU24, PFCG, SU25, SUIM, STAUTHTRACE and authorization troubleshooting.
• Experience with SAP Identity Management concepts including IAS, IPS or Microsoft Entra ID integration.
• Experience implementing Single Sign-On using SAML 2.0 and OAuth technologies.
• Knowledge of SAP BTP security architecture.
• Experience implementing security for cloud and hybrid SAP landscapes.
• Knowledge of SAP Activate methodology.
• Experience working in large global organizations with multiple SAP landscapes.
• Excellent communication skills and experience working with executive stakeholders.

TRIGYN TECHNOLOGIES, INC. is an EQUAL OPPORTUNITY EMPLOYER and has been in business for 35 years. TRIGYN is an ISO 27001:2022 and CMMI Level 5 certified company.