Senior SAP Security & Access Architect

SANROSE Information Services Inc; Tallahassee (FL); On-site; USD 140,000 - 190,000; Full time

Job summary

SANROSE Information Services Inc seeks an senior SAP Security Architect to lead security across S/4HANA, ECC, BW/4HANA, CRM, and Portal. You will design and implement role-based access, Fiori security, and secure integration with IAM platforms.

Responsibilities include security readiness for migrations, GRC maintenance, and cross‑landscape security operations in on‑prem and cloud environments. Strong SAP security tooling experience required.

Qualifications

• Bachelor’s degree in CS or related field or equivalent work experience.
• Proven SAP security expertise across S/4HANA, ECC, BW/4HANA, CRM, and Portal.
• Deep knowledge of Fiori/UI5 security design and SAP authorization concepts.
• Experience with SAP security tooling and auditing (SU24, SU25, SUIM, SU53, STAUTHTRACE).
• Familiarity with IAS/IPS, SCIM, SAML/OAuth for IAM integration.
• Experience with HANA DB security, encryption, and audit policies.
• Experience with SAP BTP security across Launchpad, Build Work Zone, CAP, SAC.
• Evidence of SoD analysis, access reviews, and GRC Access Control.

Responsibilities

• Design, develop, and maintain SAP roles and authorizations across S/4HANA, ECC, BW/4HANA, CRM, and Portal.
• Conduct security readiness assessments for migrations to S/4HANA and HANA DB platforms.
• Provide SAP Security support across all modules and landscapes (on‑prem and cloud).
• Implement SAP Fiori/UI5 security including catalogs, groups, and OData services.
• Troubleshoot Fiori applications and analyze backend authorizations and logs.
• Manage IAS/IPS for BTP authentication and provisioning and ensure identity federation.
• Maintain SAP GRC Access Control modules and perform provisioning and reviews.
• Perform SoD risk analyses, audits, and address compliance findings.
• Integrate with IAM platforms using SCIM, SAML 2.0, OAuth 2.0, and APIs.
• Establish secure trust between SAP on‑prem and BTP environments.
• Design hybrid identity architectures with AD, GRC, IAS/IPS, and SAP systems.

Skills

Fiori security

Role-based access control

IAM integration

Security design

Education

Bachelor’s degree in Computer Science or related field

SAP System & Security Certifications

ITIL Foundation

CISA or CISSP

CAMS/SUNTAX experience

Tools

SU24

SU25

SUIM

SU53

STAUTHTRACE

S/4HANA security

BTP security

SCIM

SAML/OAuth

IAS/IPS

Job description

SANROSE Information Services Inc seeks an senior SAP Security Architect to lead security across S/4HANA, ECC, BW/4HANA, CRM, and Portal. You will design and implement role-based access, Fiori security, and secure integration with IAM platforms.

Responsibilities include security readiness for migrations, GRC maintenance, and cross‑landscape security operations in on‑prem and cloud environments. Strong SAP security tooling experience required.