Senior SAP S/4HANA Security Architecture Consultant - Full Remote

For an international organization, we are urgently looking for a Senior SAP S/4HANA Security Architecture Consultant for a Full Remote position.

The consultant will be responsible for the design, implementation and governance of SAP security and authorization architecture across a major S/4HANA transformation.

Candidates need to be willing to work US office hours.

Tasks and Responsibilities:

Design and implement SAP S/4HANA security architecture for Greenfield and Brownfield projects; Define authorization strategies across Finance, Procurement, Logistics, Supply Chain and HCM; Redesign existing SAP ECC roles and authorizations for S/4HANA; Design role concepts based on SAP best practices and Fiori Business Roles and Catalogs; Design SAP Fiori Launchpad security, including catalogs, spaces, pages and business roles; Design authorization concepts for CDS Views, OData, SAP Gateway and Embedded Analytics; Define Segregation of Duties requirements with SAP GRC teams; Design security architecture for SAP BTP and hybrid SAP environments; Support identity integrations using SAP IAS, IPS and Microsoft Entra ID; Design and support Single Sign-On using SAML 2.0 and OAuth; Perform security architecture reviews and risk assessments; Troubleshoot complex SAP authorization and security issues; Support security testing, UAT, cutover and production deployment; Develop security standards and technical documentation; Provide knowledge transfer to SAP Security administrators.

Profile:

Bachelor or Master degree; 10+ years of SAP Security experience; Experience with at least 3 full lifecycle SAP ERP or S/4HANA implementations; Strong expertise in SAP S/4HANA roles and authorization concepts; Strong hands-on experience with SAP Fiori Security; Experience with SAP Gateway, CDS and OData security; Experience designing Fiori Spaces, Pages, Business Roles and Business Catalogs; Strong knowledge of SAP authorization objects and organizational-level security; Hands-on experience with PFCG, SU24, SU25, SUIM and STAUTHTRACE; Experience with SAP IAS, IPS and/or Microsoft Entra ID; Experience implementing SSO using SAML 2.0 and OAuth; Knowledge of SAP BTP security architecture; Experience securing cloud and hybrid SAP landscapes; Excellent communication skills; Fluent in English.

Key Technologies:

SAP S/4HANA | SAP Security | SAP Authorizations | PFCG | SU24 | SU25 | SUIM | STAUTHTRACE | Fiori Security | CDS | OData | SAP Gateway | SAP BTP | SAP IAS | SAP IPS | Entra ID | SAML 2.0 | OAuth .