SAP Security Specialist

Quebec.

**Key Responsibilities**:

- Provide security support and administration for SAP environments including **ECC, HR, BI, SRM, GTS, SOLMAN**, and **Java-based systems** such as **Portal, FIORI, and PI**.
- Analyze and resolve SAP security issues, performing detailed traces for problem determination across **Development, QA**, and **Production** SAP systems.
- Manage **Segregation of Duties (SoD)**, including mitigation and remediation activities. Conduct SoD analysis on roles during development and user assignment.
- Develop and maintain **BW authorization** and **access** control processes.
- Collaborate with functional teams and business users to analyze and design **security role requirements**.
- Create and maintain **work instructions** and security processes aligned with client and organizational standards.
- Configure and maintain **third-party security tools** such as **Firefighter (ER), Secure Provisioning (SP), and Separation Enforcer (SE)**.
- Ensure compliance with **critical access restrictions** and **audit requirements**.
- Provision user access, manage account creation, and handle role removals in response to **CTR/STR OUCN reviews**.
- Resolve **security incidents** and provide support for escalations and break/fix activities across the SAP security landscape.
- Identify security risks and recommend solutions to manage and mitigate these risks, including **automated solutions**.
- Assist in developing and maintaining **compensating controls** for identified security vulnerabilities.
- Monitor and ensure adherence to **SLAs** for security requests and incidents.
- Work closely with the **Internal Controls Group**, business stakeholders, and auditors to define control objectives, assess SoD risks, and propose mitigating controls.
- Prepare and deliver **ad-hoc reports** and data extracts related to SAP security, compliance, and governance.
- Support **internal and external audits**, providing requested data extracts and conducting investigations as needed.
- Design and configure **Portal Groups** for **NetWeaver Enterprise Portal Content**, **Process Integration (PI)**, and **NWDI**.

**Technical Skills & Expertise**:

- Proficiency in designing custom roles (**derived, composite, single**) using **Profile Generator (PFCG)**.
- Experience with **user management** tasks, including **SU01/SU10** for user creation, role assignments, and account maintenance.
- Advanced knowledge of **SU21/SU24** authorization objects and **troubleshooting** with tools such as **ST01, SU53, SUIM**, and **SE16** for backend tables (_AGR, USR_, UST*, TDDAT, DD0*, TOBJ*).
- Ability to create scripts for **automating user management** tasks such as user creation, deletion, role assignment, and password resets.
- Expertise in **SAP Security upgrades**, including executing **SU25 2A, 2B, 2C, 2D** and analyzing **SU24** changes.
- Strong understanding of securing **BEX Analyzer Queries** using **S_RS_COMP** and **S_RS_COMP1**.
- Experience with **Solution Manager (SOLMAN)** for **transport management**, including **RFC Request for Change** and **Change Documents (CD)**.
- Familiarity with **Security Weaver** modules, including **TA, SE, ER**.
- Proficiency in **Microsoft Word, Excel, PowerPoint, and Outlook** for documentation and reporting.

**Qualifications**:

- ** Bachelor's degree in computer science**, Information Technology, or a related field.
- ** 3-5 years** of experience in **SAP Security** across various SAP modules and systems.
- Proven ability to work in a **fast-paced** and **dynamic environment**, managing multiple priorities effectively.
- Strong **analytical** and **problem-solving** skills, with attention to detail.
- Excellent communication skills, with the ability to engage with technical and non-technical stakeholders.

Note: This option is reserved for applicants needing a reasonable accommodation related to a disability.