Information Security Analyst (SAP Security & Fiori Authorization)

Quick Facts

• Role: Information Security Analyst (SAP Security & Fiori Authorization)
• Focus: SAP S/4HANA and SAP Fiori authorization role design, troubleshooting, SoD, and access reviews

Description

Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles. Configure and secure Fiori Launchpad (catalogs, groups, tiles, spaces/pages) for embedded and standalone deployments, and keep front-end (Fiori Gateway/BTP) and back-end (S/4HANA) role synchronization aligned across OData services, ICF nodes, and backend authorization objects. Perform user administration, troubleshoot authorization errors, support SoD analysis/remediation, and deliver day-to-day security ticket resolution within SLA, including during S/4HANA upgrades and migrations.

Responsibilities

• Build and maintain PFCG authorization roles and profiles (single, composite, derived)
• Secure Fiori Launchpad: catalogs, groups, tiles, spaces/pages for embedded and standalone Fiori
• Synchronize front-end and back-end authorizations (Fiori Gateway/BTP ↔ S/4HANA), including OData/ICF mapping
• Perform user administration: create users, assign roles, mass maintenance, periodic access reviews
• Troubleshoot authorization errors using SAP tools (e.g., SU53, ST01/STAUTHTRACE, SU24)
• Support segregation of duties (SoD) risk analysis and remediation, including firefighter/emergency access
• Secure Fiori apps (transactional, analytical, factsheet) and coordinate with functional teams on role design
• Execute role redesign/cleanup using authorization object trace analysis and SU25 methodology
• Support S/4HANA upgrade and migration projects with authorization impact analysis, testing, and remediation
• Maintain documentation for role matrices, access provisioning procedures, and audit/compliance evidence
• Resolve day-to-day SAP security tickets within SLA

Requirements

• 5+ years of hands-on SAP Security experience
• Solid experience in SAP S/4HANA security and Fiori/UI5 app authorizations
• Deep knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite role structures
• Practical experience securing Fiori Launchpad in both embedded (S/4HANA) and standalone (SAP BTP) scenarios
• Experience with OData service authorization and Gateway-to-back-end role alignment
• Strong troubleshooting skills using SU53, ST01/STAUTHTRACE, and SU24 (plus related trace tools)
• Experience with SoD/risk analysis
• Familiarity with Fiori app types: transactional, analytical, factsheet
• Experience supporting S/4HANA implementation, upgrade, or migration projects from a security perspective
• Ability to work independently with minimal oversight and deliver hands-on configuration

Benefits

Not specified in the provided posting.