SAP security consultant

Job: SAP Security Analyst - Consultant

Location : Sunnyvale ,CA(Onsite)

Duration: 12 Months
Interview Rounds: 2–3 Rounds Maximum

Job Description : 

Position Overview

We are seeking an experienced SAP Security Analyst - Consultant with strong hands-on expertise in SAP S/4HANA Security, Fiori, authorization roles, and user access management. The consultant will be responsible for designing, configuring, maintaining, and troubleshooting SAP security roles and authorizations while supporting S/4HANA implementation, upgrade, and migration initiatives.

The ideal candidate must have strong practical configuration experience and be capable of working independently with minimal oversight.

Key Responsibilities

• Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles.
• Configure and secure the Fiori Launchpad, including catalogs, groups, tiles, and spaces/pages for both embedded and standalone Fiori deployments.
• Maintain front-end (Fiori Gateway/BTP) and back-end (S/4HANA) role synchronization, ensuring proper mapping between OData services, ICF nodes, and backend authorization objects.
• Perform user administration activities, including user creation, role assignment, mass user maintenance, and periodic access reviews.
• Troubleshoot authorization issues using SU53, ST01/STAUTHTRACE, and SU24 to identify and resolve missing authorizations.
• Support Segregation of Duties (SoD) analysis and remediation, including risk analysis, mitigation, and firefighter/emergency access management.
• Build and maintain security for Fiori applications, including transactional, analytical, and factsheet application types.
• Coordinate with functional teams to align security role design with business process requirements.
• Execute role redesign and cleanup initiatives, including authorization object trace analysis and role optimization using the SU25 methodology.
• Support S/4HANA upgrade and migration projects by performing authorization impact analysis, testing, and remediation.
• Maintain documentation related to role matrices, access provisioning procedures, and audit/compliance evidence.
• Respond to and resolve day-to-day SAP Security tickets within established Service Level Agreements (SLAs).

Required Qualifications

• 5+ years of hands-on SAP Security experience, with solid and demonstrable experience in SAP S/4HANA Security and Fiori/UI5 application authorizations.
• Deep working knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite role structures.
• Practical experience securing Fiori Launchpad, including catalogs, groups, spaces, pages, and tiles in both embedded S/4HANA and standalone SAP BTP environments.
• Experience with OData service authorization and alignment between Gateway front-end and S/4HANA back-end roles.
• Strong troubleshooting skills using SU53, STAUTHTRACE/ST01, SUIM, and other authorization trace tools.
• Experience with Segregation of Duties (SoD) and risk analysis.
• Familiarity with SAP Fiori application types, including transactional, analytical, and factsheet applications, and their authorization requirements.
• Experience supporting SAP S/4HANA implementation, upgrade, or migration projects from a security perspective.
• Ability to work independently with minimal oversight and deliver hands-on SAP Security configuration, rather than focusing solely on documentation or strategy.