Senior SAP S/4HANA Security Architecture Consultant Full Remote

For an international organization, we are urgently looking for a Senior SAP S/4HANA Security Architecture Consultant for a Full Remote position.

The consultant will be responsible for the design, implementation and governance of SAP security and authorization architecture across a major S/4HANA transformation.

Candidates need to be willing to work US office hours.

Tasks and Responsibilities

Design and implement SAP S/4HANA security architecture for Greenfield and Brownfield projects;Define authorization strategies across Finance, Procurement, Logistics, Supply Chain and HCM;Redesign existing SAP ECC roles and authorizations for S/4HANA;Design role concepts based on SAP best practices and Fiori Business Roles and Catalogs;Design SAP Fiori Launchpad security, including catalogs, spaces, pages and business roles;Design authorization concepts for CDS Views, OData, SAP Gateway and Embedded Analytics;Define Segregation of Duties requirements with SAP GRC teams;Design security architecture for SAP BTP and hybrid SAP environments;Support identity integrations using SAP IAS, IPS and Microsoft Entra ID;Design and support Single Sign-On using SAML 2.0 and OAuth;Perform security architecture reviews and risk assessments;Troubleshoot complex SAP authorization and security issues;Support security testing, UAT, cutover and production deployment;Develop security standards and technical documentation;Provide knowledge transfer to SAP Security administrators.Profile:

Bachelor or Master degree;10+ years of SAP Security experience;Experience with at least 3 full lifecycle SAP ERP or S/4HANA implementations;Strong expertise in SAP S/4HANA roles and authorization concepts;Strong hands-on experience with SAP Fiori Security;Experience with SAP Gateway, CDS and OData security;Experience designing Fiori Spaces, Pages, Business Roles and Business Catalogs;Strong knowledge of SAP authorization objects and organizational-level security;Hands-on experience with PFCG, SU24, SU25, SUIM and STAUTHTRACE;Experience with SAP IAS, IPS and/or Microsoft Entra ID;Experience implementing SSO using SAML 2.0 and OAuth;Knowledge of SAP BTP security architecture;Experience securing cloud and hybrid SAP landscapes;Excellent communication skills;Fluent in English.Key Technologies:

SAP S/4HANA | SAP Security | SAP Authorizations | PFCG | SU24 | SU25 | SUIM | STAUTHTRACE | Fiori Security | CDS | OData | SAP Gateway | SAP BTP | SAP IAS | SAP IPS | Entra ID | SAML 2.0 | OAuth .