SAP Security Analyst - Consultant

Amicis Global; Sunnyvale (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Amicis Global is seeking an SAP Security Analyst - Consultant to design, build, and maintain SAP S/4HANA authorization roles and Fiori security configurations. The role is based onsite in Sunnyvale, CA 94086, for a 12-month duration with 2-3 interview rounds and Zoom as the interview mode.

The ideal candidate will have 5+ years of hands-on SAP Security experience, deep knowledge of PFCG, and expertise in Fiori app security, SoD analysis, and S/4HANA upgrades.

Qualifications

• 5+ years of hands-on SAP Security experience including S/4HANA security and Fiori/UI5 authorizations.
• Solid experience with PFCG role maintenance and derived/composite roles.
• Experience securing Fiori Launchpad for embedded and standalone environments.
• Strong skills in OData service authorization and backend mapping.

Responsibilities

• Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG.
• Secure Fiori Launchpad configurations for embedded and standalone deployments.
• Maintain role synchronization between front-end and back-end components.
• Perform user administration tasks and conduct access reviews.
• Troubleshoot authorization issues using SU53, ST01, and related traces.
• Support SoD risk analysis and remediation activities.
• Lead role redesign and cleanup projects (SU25).
• Assist with S/4HANA upgrade/migration from a security perspective.
• Document role matrices and audit/compliance evidence.
• Respond to SAP security tickets within SLA.

Skills

SAP Security

S/4HANA Security

Fiori UI5

PFCG Role Maintenance

SoD/Risk Analysis

Troubleshooting SU53/ST01

OData Authorization

Gateway OData

Role Optimization SU25

Tools

PFCG

SU53

ST01

SU24

SU25

Fiori Launchpad Setup

Job description

Actual Title of the role: SAP Security Analyst - Consultant
Job Location: Sunnyvale, CA 94086
Job Duration: 12 months
Onsite/Hybrid/Remote: Onsite
Mode of interview: Primarily Zoom (Video)
No of rounds of interview: 2 to 3 max

Key Responsibilities

• Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles.
• Configure and secure Fiori Launchpad, including catalogs, groups, tiles, and spaces/pages for embedded and standalone Fiori deployments.
• Maintain front-end (Fiori Gateway/BTP) and back-end (S/4HANA) role synchronization, ensuring correct mapping between OData services, ICF nodes, and backend authorization objects.
• Perform user administration tasks: user creation, role assignment, mass user maintenance, and periodic access reviews.
• Troubleshoot authorization errors using SU53, ST01/STAUTHTRACE, and SU24 to resolve missing authorizations quickly.
• Support segregation of duties (SoD) analysis and remediation (risk analysis, mitigation, firefighter/emergency access management).
• Build and maintain security for Fiori apps including transactional, analytical, and factsheet app types, and coordinate with functional teams to align role design with business process requirements.
• Execute role redesign and cleanup projects, including authorization object trace analysis and role optimization (SU25 methodology).
• Support S/4HANA upgrade and migration projects with authorization impact analysis, testing, and remediation.
• Maintain documentation for role matrices, access provisioning procedures, and audit/compliance evidence.
• Respond to and resolve day-to-day SAP security tickets within SLA.

Required Qualifications

• 5+ years of hands-on SAP Security experience, with solid, demonstrable experience in SAP S/4HANA security and Fiori/UI5 app authorizations.
• Deep working knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite role structures.
• Practical experience securing Fiori Launchpad (catalogs, groups, spaces, pages, tiles) in both embedded (S/4HANA) and standalone (SAP BTP) scenarios.
• Experience with OData service authorization and Gateway (front-end) to back-end role alignment.
• Strong troubleshooting skills using SU53, STAUTHTRACE/ST01, SUIM, and authorization trace tools.
• Experience with SoD/risk analysis.
• Familiarity with SAP Fiori app types (transactional, analytical, factsheet) and their authorization requirements.
• Experience supporting S/4HANA implementation, upgrade, or migration projects from a security perspective.