SAP Security Analyst - Consultant (Sunnyvale, CA)

The Mom Project; Sunnyvale (CA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k

Job summary

The Mom Project is seeking a SAP Security Analyst - Consultant for a contract onsite in Sunnyvale, CA. The role focuses on designing, implementing, and maintaining SAP S/4HANA security and Fiori/UI5 authorization models, aligning with business processes and SOx/audit needs.

Responsibilities include role design, user administration, SoD risk analysis, and S/4HANA upgrade support, with a strong emphasis on hands-on configuration and remediation.

Qualifications

• 5+ years of hands-on SAP Security experience, with solid, demonstrable experience in SAP S/4HANA security and Fiori/UI5 app authorizations.
• Deep working knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite role structures.
• Practical experience securing Fiori Launchpad (catalogs, groups, spaces, pages, tiles) in embedded and standalone scenarios.
• Experience with OData service authorization and Gateway front-end to back-end role alignment.
• Strong troubleshooting using SU53, STAUTHTRACE, SUIM, and authorization trace tools.
• Experience with SoD, risk analysis and remediation.
• Experience supporting S/4HANA implementation, upgrade, or migration from a security perspective.

Responsibilities

• Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG.
• Configure and secure Fiori Launchpad for embedded and standalone deployments.
• Maintain front-end and back-end role synchronization and mapping of services to authorizations.
• Perform user administration tasks including creation, role assignment, and reviews.
• Troubleshoot authorization errors and resolve with minimal downtime.
• Support SoD analysis and remediation activities.
• Build and maintain security for Fiori apps and coordinate with business process owners.
• Lead role redesign and cleanup projects and perform SoD checks.

Skills

SAP Security

S/4HANA security

Fiori/UI5 authorizations

PFCG role maintenance

SoD risk analysis

OData service authorization

Troubleshooting SU53

Tools

SU53

ST01/STAUTHTRACE

SU24

Job description

• Please note that our customer is currently not considering applicants from the following locations: Alabama, Arkansas, Delaware, Florida, Indiana, Iowa, Louisiana, Maryland, Mississippi, Missouri, Oklahoma, Pennsylvania, South Carolina, and Tennessee.

Our Customer is a corporation that develops, manufactures, and markets robotic products designed to improve clinical outcomes of patients through minimally invasive surgery. Founded in 1995, their goal was to create innovative, robotic-assisted systems that help empower doctors and hospitals to make surgery less invasive than an open approach. Working with the top medical professionals, they continue to develop new, minimally invasive surgical platforms and future diagnostic tools to help solve complex healthcare challenges around the world.

We are seeking a SAP Security Analyst - Consultant on a contract basis to support our Customer's business needs. This role is onsite in Sunnyvale, CA.

Responsibilities

• Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles.
• Configure and secure Fiori Launchpad, including catalogs, groups, tiles, and spaces/pages for embedded and standalone Fiori deployments.
• Maintain front-end (Fiori Gateway/BTP) and back-end (S/4HANA) role synchronization, ensuring correct mapping between OData services, ICF nodes, and backend authorization objects.
• Perform user administration tasks: user creation, role assignment, mass user maintenance, and periodic access reviews.
• Troubleshoot authorization errors using SU53, ST01/STAUTHTRACE, and SU24 to resolve missing authorizations quickly.
• Support segregation of duties (SoD) analysis and remediation (risk analysis, mitigation, firefighter/emergency access management).
• Build and maintain security for Fiori apps including transactional, analytical, and factsheet app types, and coordinate with functional teams to align role design with business process requirements.
• Execute role redesign and cleanup projects, including authorization object trace analysis and role optimization (SU25 methodology).
• Support S/4HANA upgrade and migration projects with authorization impact analysis, testing, and remediation.
• Maintain documentation for role matrices, access provisioning procedures, and audit/compliance evidence.
• Respond to and resolve day-to-day SAP security tickets within SLA.

Qualifications

• 5+ years of hands‑on SAP Security experience, with solid, demonstrable experience in SAP S/4HANA security and Fiori/UI5 app authorizations.
• Deep working knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite role structures.
• Practical experience securing Fiori Launchpad (catalogs, groups, spaces, pages, tiles) in both embedded (S/4HANA) and standalone (SAP BTP) scenarios.
• Experience with OData service authorization and Gateway (front-end) to back-end role alignment.
• Strong troubleshooting skills using SU53, STAUTHTRACE/ST01, SUIM, and authorization trace tools.
• Experience with SoD/risk analysis.
• Familiarity with SAP Fiori app types (transactional, analytical, factsheet) and their authorization requirements.
• Experience supporting S/4HANA implementation, upgrade, or migration projects from a security perspective.
• Ability to work independently with minimal oversight and deliver hands‑on configuration, not just documentation or strategy.

We offer a competitive salary range for this position. Most candidates who join our team are hired at the median of this range, ensuring fair and equitable compensation based on experience and qualifications.

Contractor benefits are available through our 3rd Party Employer of Record (Available upon completion of waiting period for eligible engagements) Benefits include: Medical, Dental, Vision, 401k.

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.