Provide daytoday SAP security production support for on-premise applications including ECC, BW, Solution Manager, GRC Access Control, and HANA
Perform non-production user administration (create, modify, terminate, lock/unlock users)
Maintain and troubleshoot SAP roles and authorizations (single, composite, derived)
Analyze and resolve authorization issues (SU53, authorization traces)
Support security transports, postrefresh access validation, and cutover activities
Provide audit, SOX, and access review support and evidence
Support SAP HANA database security
Resolve SAP security incidents in alignment with SLAs

Provide security input during S/4HANA security model design including business roles, catalogs, and Fiori authorization concepts
Support security and access enablement during SAP BDC onboarding and implementation
Provide guidance on data access controls and leastprivilege principles aligned with data governance strategy
Support SAP BTP security setup during implementation, including subaccount access, role collections, and entitlements
Assist with identity federation and access integration between BTP, SAP Cloud Identity Services, and backend SAP systems
Support secure enablement of BTP services and custom applications from an authorization and access perspective
Support SSO and federation setup for S/4HANA, BTP, BDC, and Cloud ALM
Support Cloud Identity Services design and implementation activities, including authentication and provisioning models
Assist with user lifecycle strategy across SAP cloud systems
Support cutover and golive security readiness, including access provisioning, validation, and hypercare support
Provide access troubleshooting and stabilization during cloud onboarding, golive, and postimplementation phases

Maintain operational documentation and knowledge transfer materials

SAP Security Consultant

Key skills