Senior SAP Security Analyst

Quick Facts

• Role: Information Security Analyst 3 (SAP Security)

Description

You will design, build, and maintain SAP S/4HANA authorization roles using PFCG, including single, composite, and derived roles. You will configure and secure SAP Fiori Launchpad and ensure correct synchronization between front-end (Fiori Gateway/BTP) and back-end (S/4HANA) role/authorization mapping. You will troubleshoot authorization errors, administer users and roles, perform access reviews, and support SoD remediation, role redesign/cleanup, and S/4HANA upgrade/migration authorization impact work.

Responsibilities

• Develop and maintain PFCG roles (single/composite/derived) and related authorization objects

• Secure Fiori Launchpad (catalogs, groups, tiles, spaces/pages) for embedded and standalone deployments

• Synchronize and validate front-end/back-end role mapping between OData services, ICF nodes, and authorization objects

• Perform user administration (creation, role assignment, mass updates) and periodic access reviews

• Investigate and resolve authorization errors using SU53, ST01/STAUTHTRACE, SU24, and authorization trace tools

• Support SoD analysis and remediation, including emergency/firefighter access management

• Build and maintain authorization security for Fiori apps (transactional, analytical, factsheet) aligned to business process needs

• Execute role redesign/cleanup projects using authorization trace analysis and SU25 methodology

• Support S/4HANA upgrade and migration through authorization impact analysis, testing, and remediation

• Maintain role matrices, access provisioning procedures, and audit/compliance evidence

• Resolve day-to-day SAP security tickets within SLA

Requirements

• 5+ years of hands-on SAP Security experience

• Demonstrable SAP S/4HANA security and Fiori/UI5 app authorization experience

• Deep knowledge of PFCG role maintenance and SU24 proposal maintenance, including derived/composite role structures

• Practical experience securing Fiori Launchpad for both embedded (S/4HANA) and standalone (SAP BTP) scenarios

• Experience with OData service authorization and SAP Gateway/front-end to back-end role alignment

• Strong troubleshooting using SU53, ST01/STAUTHTRACE, SUIM, and authorization trace tools

• Experience with SoD/risk analysis

• Familiarity with Fiori app types (transactional, analytical, factsheet) and their authorization requirements

• Experience supporting S/4HANA implementation, upgrade, or migration projects from a security perspective

• Ability to work independently with minimal oversight and deliver hands-on configuration work