SAP Security Specialist

Job Description The SAP Security Specialist acts as a subject matter expert on the SAP S / 4HANA project, designing, developing, and implementing roles while following established procedures and best practices. The specialist participates in requirements gathering, testing, documentation, knowledge transfer, cutover planning, and task execution. Salary The specialist will also provide after-hours and weekend support when necessary. Roles and Responsibilities Design, build, test, and deploy SAP roles with associated entitlements, translating functional requirements into technical design. Process SAP access requests and ensure appropriate approvals are granted. Assign roles to grant access to secured IT environments. Integrate SAP, AD, portal, and cloud applications with the IGA tool (Saviynt). Collaborate with stakeholders to gather requirements for new SAP systems or application integrations within IAM tools and processes. Support the implementation of SAP security for new deployments and upgrades. Provide technical assistance for issues related to SAP authorizations. Ensure compliance with CN IT standards (e.g., Security, Architecture, Project Delivery Methodology, SOX, etc.). Create and maintain accurate process documentation. Technical Skills Minimum of 5 years of experience with SAP authorization in environments such as ECC, Solution Manager, BW, HANA, GRC, and Fiori. More specifically : SAP ABAP & Fiori User Management, including SNC (SU01, SU10, EWZ5) Security roles (PFCG), Master / Derived, and authorizations Fiori Catalogs and Groups, and their management within security roles Management of security roles using transports (Solution Manager ChaRM) Cloud applications (BTP, IBP, SAC, Datasphere, Workzone, ABAP on Cloud, Cloud ALM, Signavio, EnableNow, Vertex) Security access / privileges (Roles, Role Collections, Groups, etc.) User and access management in BTP Cloud Foundry, SAP HANA Cloud, and related services Cloud Identity Services Understanding of authentication and provisioning mechanisms for connected applications HANA Database User Management Security roles (catalog and repository-based) Identity and Access Management (IAM) Work experience with IAM tools such as IBM Security Identity Manager (ISIM), Saviynt, or SailPoint Strong understanding of Identity & Access Management concepts and best practices with hands‑on experience (e.g., provisioning / de‑provisioning, SSO, privileged access management, segregation of duties) General Skills and Competencies Results‑oriented, with the ability to deliver quality products in a timely manner Ability to manage multiple assignments simultaneously Strong problem‑solving skills through ingenuity and creativity High attention to detail Strong time management and organizational skills Ability to prioritize effectively among multiple requests Capacity to work under pressure with limited supervision, while maintaining a sense of urgency Ability to resolve complex security issues through research and technical troubleshooting Strong teamwork and collaboration skills; able to adapt communication to different audiences Assets Experience with SAP HR authorization security Familiarity with SAP GRC (Governance, Risk, and Compliance) solutions Knowledge of SAP Fiori and its security aspects Experience with SAP Cloud Platform security features Understanding of data privacy regulations and their application to SAP environments Experience conducting security audits and assessments Ability to develop and deliver training on SAP security best practices Analytical skills to identify and mitigate security risks Experience integrating SAP systems with third‑party applications #J-18808-Ljbffr