SAP Security Analyst

SANROSE Information Services Inc; Tallahassee (FL); On-site; USD 140,000 - 190,000; Full time

Job summary

SANROSE Information Services Inc seeks an senior SAP Security Architect to lead security across S/4HANA, ECC, BW/4HANA, CRM, and Portal. You will design and implement role-based access, Fiori security, and secure integration with IAM platforms.

Responsibilities include security readiness for migrations, GRC maintenance, and cross‑landscape security operations in on‑prem and cloud environments. Strong SAP security tooling experience required.

Qualifications

• Bachelor’s degree in CS or related field or equivalent work experience.
• Proven SAP security expertise across S/4HANA, ECC, BW/4HANA, CRM, and Portal.
• Deep knowledge of Fiori/UI5 security design and SAP authorization concepts.
• Experience with SAP security tooling and auditing (SU24, SU25, SUIM, SU53, STAUTHTRACE).
• Familiarity with IAS/IPS, SCIM, SAML/OAuth for IAM integration.
• Experience with HANA DB security, encryption, and audit policies.
• Experience with SAP BTP security across Launchpad, Build Work Zone, CAP, SAC.
• Evidence of SoD analysis, access reviews, and GRC Access Control.

Responsibilities

• Design, develop, and maintain SAP roles and authorizations across S/4HANA, ECC, BW/4HANA, CRM, and Portal.
• Conduct security readiness assessments for migrations to S/4HANA and HANA DB platforms.
• Provide SAP Security support across all modules and landscapes (on‑prem and cloud).
• Implement SAP Fiori/UI5 security including catalogs, groups, and OData services.
• Troubleshoot Fiori applications and analyze backend authorizations and logs.
• Manage IAS/IPS for BTP authentication and provisioning and ensure identity federation.
• Maintain SAP GRC Access Control modules and perform provisioning and reviews.
• Perform SoD risk analyses, audits, and address compliance findings.
• Integrate with IAM platforms using SCIM, SAML 2.0, OAuth 2.0, and APIs.
• Establish secure trust between SAP on‑prem and BTP environments.
• Design hybrid identity architectures with AD, GRC, IAS/IPS, and SAP systems.

Skills

Fiori security

Role-based access control

IAM integration

Security design

Education

Bachelor’s degree in Computer Science or related field

SAP System & Security Certifications

ITIL Foundation

CISA or CISSP

CAMS/SUNTAX experience

Tools

SU24

SU25

SUIM

SU53

STAUTHTRACE

S/4HANA security

BTP security

SCIM

SAML/OAuth

IAS/IPS

Job description

Education

Bachelor’s degree in computer science, MIS, or related field (or equivalent work experience).

Certifications

• Preferred: SAP System & Security Certifications, ITIL Foundation.
• Preferred Security Certifications: CISA or CISSP.
• Experience with CAMS or SUNTAX projects is a plus.

Required Experience

• 15+ years of SAP experience supporting ECC, BW, CRM, and transitioning to S/4HANA,BW/4HANA, and Fiori.
• Expertise in role-based access control for both technical and business end-users in S/4HANA and BW/4HANA.
• Proficient in Fiori/UI5 security design: catalogs, groups, OData services, and business roles.
• Experience troubleshooting Fiori authorization issues using SAP tools and SAP Notes.
• Strong hands-on skills in SAP security tools: SU24, SU25, SUIM, SU53, STAUTHTRACE.
• Implementation of BW/4HANA analysis authorizations and row-level data controls.
• Deep knowledge of SAP HANA DB security (including encryption, audit policies, and SQL-level controls).
• Integration of SAP with third-party IAM tools (e.g., Azure AD, SailPoint, Saviynt) via SCIM, SAML,OAuth, and IPS.
• Extensive experience with SAP BTP security across Launchpad Service, SAP Build Work Zone, CAP, and SAC.
• Configure and manage IAS/IPS for identity provisioning and SSO federation.
• Design secure hybrid architecture integrating on-prem SAP systems with BTP.
• GRC Access Control implementation (ARA, ARM, EAM) including SoD analysis and access review processes.
• Familiarity with IRS 1075 (FTI) and OCSE audit controls and compliance requirements.

Responsibilities

• Design, develop, and maintain SAP roles and authorizations across S/4HANA, ECC, BW/4HANA, CRM, and Portal systems.
• Perform security readiness and impact assessments for migrations to S/4HANA and HANA DB platforms.
• Provide SAP Security support across all modules and landscapes (on-prem and cloud).
• Implement and support SAP Fiori/UI5 security including catalog, group, OData service, and semantic object configurations.
• Perform backend role design including transaction codes, Web Dynpro, CRM Web UI, and OData.
• Troubleshoot Fiori applications and perform error log analysis for missing services and backend authorizations.
• Configure and manage IAS/IPS for BTP authentication and provisioning and ensure secure identity federation.
• Maintain and support SAP GRC Access Control modules (ARA, ARM, EAM), including provisioning and access reviews.
• Conduct SoD risk analysis, support internal/external audits, and address compliance findings. HANA DB security including role design, encryption configuration, and audit policy implementation.
• Support integration with IAM platforms using SCIM, SAML 2.0, OAuth 2.0, and APIs.
• Establish secure trust and connectivity between SAP on-prem systems and BTP environments.
• Design and maintain hybrid identity architecture integrating AD, GRC, IAS/IPS, and SAP systems.
• Configure and support Central User Administration (CUA) and Single Sign-On (SSO).
• Perform system measurements and support SAP licensing audits.
• Review and revise SAP access roles to ensure separation of duties and compliance.
• Create and maintain security-related documentation including technical designs, SOPs, and audit artifacts.
• Support project managers with estimation, ticket tracking, and deliverables.
• Monitor security alerts and participate in remediation of EarlyWatch and security scan reports.
• Provide off‑hours, weekend, holiday, and 24/7 on‑call SAP Security support as required.