SAP Security Specialist

PlanIT Group, LLC; Orlando (FL); On-site; USD 110,000 - 170,000; Full time

Job summary

PlanIT Group, LLC seeks a SAP BASIS Security Engineer/Administrator to secure S/4HANA and Fiori across SAP environments, including ECC, BW, CRM, MDG, GTS, and cloud services. You will focus on role design, SoD analysis, GRC controls, and incident response to protect data and processes.

You will collaborate with IT security, basis, and audit teams to implement GDPR, SOX, and ISO 27001 controls, manage user provisioning, SSO, transports, and agile/change processes, ensuring compliant security

Qualifications

• In-depth knowledge of SAP authorizations (roles, profiles, authorizations objects).
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA).
• Understanding of SAP GRC (Access Control, Process Control).
• S/4HANA and Fiori security expertise.
• Experience with standard engineering processes and translating business to technical requirements.
• Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors.
• Management of SAP Basis components (client administration, transports, system copies).
• Familiarity with SAP Cloud Platform and SAP BTP security services.
• Design, build, and maintain composite and single roles; SoD analysis.
• User provisioning, password policies, SSO; maintain Fiori authorizations across frontend/backend.
• Manage backend OData service authorizations for Fiori apps.
• Knowledge of Identity Access Management tools.
• Implementation of SoD controls and remediation; audit-ready documentation.
• Knowledge of GDPR, SOX, ISO 27001 requirements; monitor logs and remediation.
• ServiceNow or incident management tools; troubleshooting tools such as ST01/STAUTHTRACE.

Skills

SAP authorizations

NetWeaver security

GRC Access Control

Fiori security

Role design & SoD

User provisioning & SSO

ABAP debugging basics

PowerShell/Python scripting

Transport & change mgmt

Security incident monitoring

Tools

CTS/STMS

ServiceNow

OData security

Fiori security catalogs

Job description

S/4 Hana & Fiori Security

This role is for a SAP BASIS Security Engineer / Administrator.

The Following Details Required And Desired Skills

SAP Security Foundations

• Indepth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security

Engineering Methodology

• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
• Experience with software systems design

System & Platform Expertise

• Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
• Management of SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services

User & Role Management

• Design, build, and maintain composite and single roles
• Conduct role deduplication, role testing, and segregationofduties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools

Compliance & Auditing

• Implementation of SoD controls and remediation
• Ability to produce auditready documentation and reports
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation

Technical Tools & Utilities

• SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
• SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
• Use of transport tools (CTS, STMS) and changemanagement workflows
• Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
• Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG)
• ServiceNow or any other incident management tool

Security Incident Management

• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting rootcause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening

Programming & Scripting

• Basic ABAP debugging and code review for securityrelated enhancements
• Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting

Project & Change Management

• Experience with Agile or Waterfall delivery models
• Ability to manage multiple security projects, deadlines, and stakeholder expectations

Communication & Collaboration

• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training endusers and administrators on security best practices

Soft Skills

• Strong analytical and problemsolving abilities
• Attention to detail and high level of accuracy
• Proactive mindset and continuous learning orientation
• Collaborative mindset and approach to work