PG
SAP Security Specialist
PlanIT Group
đşđ¸ United States
Remote
4 weeks ago
- SAP
- ABAP
- Java
- HANA
- S/4HANA
- Fiori
- SAP ECC
- CRM
- Ariba
- SuccessFactors
- Kerberos
- SAML
- OAuth
- OData
- GDPR
- SOX
- ISO 27001
- Change Management
- ServiceNow
- Incident Management
- PowerShell
- Bash
- Python
- Agile
- Waterfall
4 weeks ago
The following details required and desired skills:
SAP Security Foundations
⢠Inâdepth knowledge of SAP authorizations (roles, profiles, authorizations objects)
⢠Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
⢠Understanding of SAP GRC (Access Control, Process Control)
⢠S/4 Hana & Fiori Security
Engineering Methodology
⢠Experience with standard engineering process
⢠Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
⢠Experience with software systems design
System & Platform Expertise
⢠Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
⢠Management of SAP Basis components (client administration, transports, system copies)
⢠Familiarity with SAP Cloud Platform and SAP BTP security services
User & Role Management
⢠Design, build, and maintain composite and single roles
⢠Conduct role deâduplication, role testing, and segregationâofâduties (SoD) analysis
⢠User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
â˘Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
â˘Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
â˘Familiarity with Identity Access Management tools
Compliance & Auditing
⢠Implementation of SoD controls and remediation
⢠Ability to produce auditâready documentation and reports
⢠Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
⢠Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation
Technical Tools & Utilities
⢠SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
⢠SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
⢠Use of transport tools (CTS, STMS) and changeâmanagement workflows
⢠Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
⢠Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG)
⢠ServiceNow or any other incident management tool
Security Incident Management
⢠Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
⢠Conducting rootâcause analysis and remediation for security breaches
⢠Coordination with IT security teams for patching and hardening
Programming & Scripting
⢠Basic ABAP debugging and code review for securityârelated enhancements
⢠Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
Project & Change Management
⢠Experience with Agile or Waterfall delivery models
⢠Ability to manage multiple security projects, deadlines, and stakeholder expectations
Communication & Collaboration
⢠Clear documentation of security policies, procedures, and role designs
⢠Ability to liaise with functional, basis, and audit teams
⢠Training endâusers and administrators on security best practices
Soft Skills
⢠Strong analytical and problemâsolving abilities
⢠Attention to detail and high level of accuracy
⢠Proactive mindset and continuous learning orientation
⢠Collaborative mindset and approach to work
SAP Security Specialist ¡ PlanIT Group