SAP Security - BW, S4 HANA and SAP BTP
Job Description
Role: SAP Security - BW, S4 HANA and SAP BTP)
\n
Location: Raritan, NJ - Hybrid
\n
\n
Job type: W2- Contract
\n
\n
Must have skills: Strong SAP Security in the areas of SAPBW, SAP S/4 HANA and SAP BTP(Highest weightage will be on SAP BTP Security)., 2 to 3 years on SAP BTP Security
\n
\n
Job Description:
\n
The SAP Security Engineer is responsible for securing the enterprise's hybrid SAP landscape. This role demands expertise in building and managing Role-Based Access Controls (RBAC), implementing Identity and Access Management (IAM) across cloud and on-premise systems, and safeguarding sensitive analytical data.
\n
The consultant should have worked on the SAP S/4 HANA implementation projects as a Security consultant establishing end to end security set up in SAP S/4 HANA as well as in SAP BTP.
\n
\n
Key Responsibilities
\n
SAP BTP Security & Cloud Governance ( Must have )
\n
- \n
- Architect and configure SAP Cloud Identity Services (IAS) and Identity Provisioning Services (IPS) to manage user lifecycles across BTP and SaaS applications.
- Secure cloud-to-on-premise connections using SAP Cloud Connector and manage destinations, trust configurations, and OAuth clients.
- Monitor BTP subaccounts, role collections, and ensure compliance with cloud shared-responsibility models. [
\n
\n
\n
\n
SAP S/4HANA & Fiori Security
\n
- \n
- Design and maintain Role-Based Access Control (RBAC) and PFCG roles for S/4HANA, including complex custom transactions and Structural Profiles.
- Build and secure SAP Fiori catalogs, groups, and spaces, mapping UI-level access to backend authorization objects.
- Perform Segregation of Duties (SoD) conflict analysis and remediation using tools like SAP GRC or Identity Access Governance (IAG). [
\n
\n
\n
\n
SAP BW (Business Warehouse) & Analytics Security
\n
- \n
- Design complex data-level authorizations using Analysis Authorizations (and legacy Reporting Authorizations) in SAP BW and BW/4HANA.
- Secure reporting layers within SAP Analytics Cloud (SAC), managing teams, folders, and data access dimensions.
- Apply strict row-level and column-level security to integrate with backend InfoCubes, DataStore Objects (DSOs), and queries. [1]
\n
\n
\n
\n
Qualifications & Experience
\n
- \n
- Cloud Knowledge: Familiarity with BTP Global Accounts, Subaccounts, Entitlements, and Cloud Foundry security models.
- Analytical Skills: Deep understanding of SAP BW Analysis Authorizations and multi-dimensional security models.
- Certifications: Desirable credentials include SAP Certified Technology Associate (SAP BTP, SAP S/4HANA System Administration, or SAP HANA).
\n
\n
\n
\n
\n
\n
Regards,
\n
\n
Jagannath Gaddam
\n