SAP Security Analyst - Consultant (Sunnyvale, CA)

BBG Ventures, LLC; Sunnyvale (CA); On-site; USD 96,000 - 165,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k

EOR Benefits

Job summary

BBG Ventures, LLC in Sunnyvale, CA seeks a SAP Security Analyst (Consultant) on a contract basis onsite. You will design and maintain SAP S/4HANA authorizations, secure Fiori Launchpad, and perform user administration with a focus on SoD and remediation.

The role requires deep experience with PFCG, OData, and Fiori app security across embedded and SAP BTP environments. Independent work style and timely ticket resolution are valued.

Qualifications

• 5+ years hands-on SAP Security, with S/4HANA security and Fiori/UI5 authorizations.
• Deep knowledge of PFCG role maintenance and derived/composite roles.
• Experience securing Fiori Launchpad in embedded and SAP BTP environments.
• Experience with OData service authorization and gateway alignment between frontend and backend.

Responsibilities

• Design, build, and maintain SAP S/4HANA authorization roles and profiles (PFCG).
• Configure and secure Fiori Launchpad for embedded and standalone deployments.
• Maintain role synchronization between OData services, ICF nodes, and backend authorizations.
• Perform user administration tasks and periodic access reviews.
• Troubleshoot authorization errors with SU53/ST01/STAUTHTRACE and SU24.
• Support SoD analysis and remediation.
• Build security for Fiori apps and align with business processes.
• Execute role redesign and SU25-based optimization.
• Support S/4HANA upgrade/migration security impact analysis.
• Maintain role matrices and audit/compliance evidence.
• Respond to SAP security tickets within SLA.

Skills

SAP Security

S/4HANA Security

Fiori/UI5

PFCG

SoD Analysis

OData Security

Troubleshooting

Tools

SU53

SU24

STAUTHTRACE

SUIM

Job description

• Please note that our customer is currently not considering applicants from the following locations: Alabama, Arkansas, Delaware, Florida, Indiana, Iowa, Louisiana, Maryland, Mississippi, Missouri, Oklahoma, Pennsylvania, South Carolina, and Tennessee.***

Our Customer is a corporation that develops, manufactures, and markets robotic products designed to improve clinical outcomes of patients through minimally invasive surgery. Founded in 1995, their goal was to create innovative, robotic-assisted systems that help empower doctors and hospitals to make surgery less invasive than an open approach. Working with the top medical professionals, they continue to develop new, minimally invasive surgical platforms and future diagnostic tools to help solve complex healthcare challenges around the world.

We are seeking a SAP Security Analyst - Consultant on a contract basis to support our Customer's business needs. This role is onsite in Sunnyvale, CA.

Responsibilities

• Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles.
• Configure and secure Fiori Launchpad, including catalogs, groups, tiles, and spaces/pages for embedded and standalone Fiori deployments.
• Maintain front-end (Fiori Gateway/BTP) and back-end (S/4HANA) role synchronization, ensuring correct mapping between OData services, ICF nodes, and backend authorization objects.
• Perform user administration tasks: user creation, role assignment, mass user maintenance, and periodic access reviews.
• Troubleshoot authorization errors using SU53, ST01/STAUTHTRACE, and SU24 to resolve missing authorizations quickly.
• Support segregation of duties (SoD) analysis and remediation (risk analysis, mitigation, firefighter/emergency access management).
• Build and maintain security for Fiori apps including transactional, analytical, and factsheet app types, and coordinate with functional teams to align role design with business process requirements.
• Execute role redesign and cleanup projects, including authorization object trace analysis and role optimization (SU25 methodology).
• Support S/4HANA upgrade and migration projects with authorization impact analysis, testing, and remediation.
• Maintain documentation for role matrices, access provisioning procedures, and audit/compliance evidence.
• Respond to and resolve day-to-day SAP security tickets within SLA.

Qualifications

• 5+ years of hands‑on SAP Security experience, with solid, demonstrable experience in SAP S/4HANA security and Fiori/UI5 app authorizations.
• Deep working knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite role structures.
• Practical experience securing Fiori Launchpad (catalogs, groups, spaces, pages, tiles) in both embedded (S/4HANA) and standalone (SAP BTP) scenarios.
• Experience with OData service authorization and Gateway (front-end) to back-end role alignment.
• Strong troubleshooting skills using SU53, STAUTHTRACE/ST01, SUIM, and authorization trace tools.
• Experience with SoD/risk analysis.
• Familiarity with SAP Fiori app types (transactional, analytical, factsheet) and their authorization requirements.
• Experience supporting S/4HANA implementation, upgrade, or migration projects from a security perspective.
• Ability to work independently with minimal oversight and deliver hands‑on configuration, not just documentation or strategy.

We offer a competitive salary range for this position. Most candidates who join our team are hired at the median of this range, ensuring fair and equitable compensation based on experience and qualifications.

Contractor benefits are available through our 3rd Party Employer of Record (Available upon completion of waiting period for eligible engagements) Benefits include: Medical, Dental, Vision, 401k.

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.