SAP Security Engineer — Roles, GRC & S/4HANA

PlanIT Group

Orlando, Northern (FL, KY)

Hybrid

USD 110,000 - 160,000

Full time

14 days+

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

PlanIT Group in Orlando, FL is seeking a SAP BASIS Security Engineer/Administrator to design and enforce SAP security, manage roles, authorizations, and SSO integrations across ABAP, Java, and SAP HANA environments. You will implement SoD controls, perform audits, monitor system logs, and collaborate with IT security to patch and harden SAP landscapes using tools like SU01, PFCG, ST01, CTS, and STMS.

This role requires strong communication and hands-on troubleshooting skills to support SAP

Qualifications

In-depth knowledge of SAP authorizations (roles, profiles, authorizations objects).
Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA).
Understanding of SAP GRC (Access Control, Process Control).
S/4 Hana & Fiori Security.

Responsibilities

Design, build, and maintain composite and single roles.
Conduct role de‑duplication, role testing, and segregation‑of‑duties (SoD) analysis.
User provisioning, password policies, and SSO (Kerberos, SAML, OAuth).
Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications