SAP Security Specialist

Summary

PlanIT Group, LLC is seeking a SAP Security Specialist to serve as a SAP BASIS Security Engineer / Administrator. The role focuses on SAP authorization, role and user management, compliance, security incident response, Fiori and backend security, automation, and collaboration across technical and audit teams.

Responsibilities

• Design, build, and maintain composite and single roles
• Conduct role de‐duplication, role testing, and segregation‐of‐duties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Implementation of SoD controls and remediation
• Ability to produce audit‐ready documentation and reports
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation
• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting root‐cause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening
• Basic ABAP debugging and code review for security‐related enhancements
• Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
• Ability to manage multiple security projects, deadlines, and stakeholder expectations
• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training end‐users and administrators on security best practices

Skills

• In‐depth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security
• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
• Experience with software systems design
• Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
• Management of SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services
• Design, build, and maintain composite and single roles
• Conduct role de‐duplication, role testing, and segregation‐of‐duties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools
• Implementation of SoD controls and remediation
• Ability to produce audit‐ready documentation and reports
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation
• SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
• SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
• Use of transport tools (CTS, STMS) and change‐management workflows
• Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
• Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR\_LOG)
• ServiceNow or any other incident management tool
• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting root‐cause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening
• Basic ABAP debugging and code review for security‐related enhancements
• Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
• Experience with Agile or Waterfall delivery models
• Ability to manage multiple security projects, deadlines, and stakeholder expectations
• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training end‐users and administrators on security best practices
• Strong analytical and problem‐solving abilities
• Attention to detail and high level of accuracy
• Proactive mindset and continuous learning orientation
• Collaborative mindset and approach to work

Qualifications

Must Haves

• In‐depth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security
• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
• Experience with software systems design
• Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
• Management of SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services
• Design, build, and maintain composite and single roles
• Conduct role de‐duplication, role testing, and segregation‐of‐duties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools
• Implementation of SoD controls and remediation
• Ability to produce audit‐ready documentation and reports
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation
• SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
• SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
• Use of transport tools (CTS, STMS) and change‐management workflows
• Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
• Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR\_LOG)
• ServiceNow or any other incident management tool
• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting root‐cause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening
• Basic ABAP debugging and code review for security‐related enhancements
• Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
• Experience with Agile or Waterfall delivery models
• Ability to manage multiple security projects, deadlines, and stakeholder expectations
• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training end‐users and administrators on security best practices
• Strong analytical and problem‐solving abilities
• Attention to detail and high level of accuracy
• Proactive mindset and continuous learning orientation
• Collaborative mindset and approach to work

Benefits

• Remote work arrangement