SAP S/4HANA Security Architecture and Implementation Consultant

Trigyn has a contractual opportunity for a SAP S/4HANA Security Architecture and Implementation Consultant. This resource will be working Remotely.

The SAP S/4HANA Security Architecture Consultant will support the design, implementation and governance of SAP security across the S/4HANA project. The consultant will work closely with business process owners, functional consultants, Basis, Infrastructure, Cybersecurity and Enterprise Architecture teams to ensure that security is designed and implemented in accordance with SAP and client standards.

As part of the ERP Delivery Team, and under the supervision of ERP staff, the consultant will be responsible for: • Design and implement SAP S/4HANA security architecture for Greenfield and Brownfield implementation projects. • Define enterprise authorization strategy across SAP S/4HANA modules including Finance, Procurement, Logistics, Supply Chain and HCM. • Develop role design methodology based on SAP Best Practices and Fiori business catalogs. • Lead redesign of SAP ECC security into SAP S/4HANA security utilizing a Greenfield approach where appropriate. • Design and implement SAP Fiori Launchpad security including catalogs, spaces, pages, business roles and business catalogs. • Design authorization concepts for embedded analytics, CDS Views and SAP Gateway services. • Define Segregation of Duties (SoD) requirements together with Governance, Risk and Compliance teams. • Develop security architecture for SAP Business Technology Platform (BTP) integrations where required. • Support integration security involving SAP Cloud ALM, Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Microsoft Entra ID and Single Sign-On. • Perform security architecture reviews throughout Design, Build, Test and Deploy phases. • Conduct security risk assessments and recommend mitigation strategies. • Support security-related testing including Unit Testing, Integration Testing, User Acceptance Testing and Production Cutover. • Develop security standards, procedures, technical documentation and operational guides. • Provide knowledge transfer and mentoring to internal SAP Security administrators.

A minimum of 10 years of progressively responsible experience in SAP Security architecture, implementation and support, including: • Minimum three full lifecycle SAP ERP or SAP S/4HANA implementations. • Strong expertise in SAP S/4HANA Authorization Concept. • Extensive experience with: o SAP Fiori Security o SAP Gateway Security o CDS Authorization o OData Security o Embedded Analytics • Experience designing Fiori Spaces and Pages. • Experience designing SAP Business Roles and Business Catalogs. • Strong understanding of SAP authorization objects and organizational level security. • Experience with SU24, PFCG, SU25, SUIM, STAUTHTRACE and authorization troubleshooting. • Experience with SAP Identity Management concepts including IAS, IPS or Microsoft Entra ID integration. • Experience implementing Single Sign-On using SAML 2.0 and OAuth technologies. • Knowledge of SAP BTP security architecture. • Experience implementing security for cloud and hybrid SAP landscapes. • Knowledge of SAP Activate methodology. • Experience working in large global organizations with multiple SAP landscapes. • Excellent communication skills and experience working with executive stakeholders.