Senior SAP S/4HANA Security Architecture Consultant Full Remote

For an international organization, we are urgently looking for a Senior SAP S/4HANA Security Architecture Consultant for a Full Remote position.

The consultant will be responsible for the design, implementation and governance of SAP security and authorization architecture across a major S/4HANA transformation.

Candidates need to be willing to work US office hours.

Tasks and Responsibilities:

• Design and implement SAP S/4HANA security architecture for Greenfield and Brownfield projects;
• Define authorization strategies across Finance, Procurement, Logistics, Supply Chain and HCM;
• Redesign existing SAP ECC roles and authorizations for S/4HANA;
• Design role concepts based on SAP best practices and Fiori Business Roles and Catalogs;
• Design SAP Fiori Launchpad security, including catalogs, spaces, pages and business roles;
• Design authorization concepts for CDS Views, OData, SAP Gateway and Embedded Analytics;
• Define Segregation of Duties requirements with SAP GRC teams;
• Design security architecture for SAP BTP and hybrid SAP environments;
• Support identity integrations using SAP IAS, IPS and Microsoft Entra ID;
• Design and support Single Sign-On using SAML 2.0 and OAuth;
• Perform security architecture reviews and risk assessments;
• Troubleshoot complex SAP authorization and security issues;
• Support security testing, UAT, cutover and production deployment;
• Develop security standards and technical documentation;
• Provide knowledge transfer to SAP Security administrators.

Profile:

• Bachelor or Master degree;
• 10+ years of SAP Security experience;
• Experience with at least 3 full lifecycle SAP ERP or S/4HANA implementations;
• Strong expertise in SAP S/4HANA roles and authorization concepts;
• Strong hands-on experience with SAP Fiori Security;
• Experience with SAP Gateway, CDS and OData security;
• Experience designing Fiori Spaces, Pages, Business Roles and Business Catalogs;
• Strong knowledge of SAP authorization objects and organizational-level security;
• Hands-on experience with PFCG, SU24, SU25, SUIM and STAUTHTRACE;
• Experience with SAP IAS, IPS and/or Microsoft Entra ID;
• Experience implementing SSO using SAML 2.0 and OAuth;
• Knowledge of SAP BTP security architecture;
• Experience securing cloud and hybrid SAP landscapes;
• Excellent communication skills;
• Fluent in English.

Key Technologies:

SAP S/4HANA | SAP Security | SAP Authorizations | PFCG | SU24 | SU25 | SUIM | STAUTHTRACE | Fiori Security | CDS | OData | SAP Gateway | SAP BTP | SAP IAS | SAP IPS | Entra ID | SAML 2.0 | OAuth