Sr SAP Security Engineer

• Be the Subject Matter Expert of SAP Security Concepts and demonstrate full technical competence

• Perform advanced SAP GRC configuration, administration, and maintenance. 

• Translate complex business functional requirements into technical design for security roles.

• Develop and maintain roles and end user authorization assignments.

• Maintain the SAP GRC rule set to assure proper documentation of functions and segregation of duties and sensitive access risks. 

• Perform segregation of duties and sensitive access analysis during development/maintenance of roles

• Ensure that Emergency Access (FFIDs) are successfully configured and managed to ensure elevated emergency access is properly limited, managed and controlled.

• Studying, examining, and interpreting the problem or situation (complex) by separating it into its discrete components (simple) to better understand how the components fit together and why they are arranged in a particular way

• Work closely with SAP contacts and professionals to troubleshoot & resolve security issues in implemented SAP GRC applications; Debug and provide configuration fixes based on issues.

• Document SAP Security design and administration processes, create and update operational guides, and monitor existing operational guides for consistency and completeness.

• Propose and implements SAP security enhancements, software and hardware updates, to support growth and improve the security and reliability of the system. 

• Support configuration & integration processes with IAM tools i.e. Saviynt and Service Now.

• Support Functional Unit Testing, User Acceptance Testing and other testing activities performed by different teams. 

• 7+ years of IT experience and 5+ years of SAP security design, implementation, and administration of SAP (S/4, Fiori, B/4, etc..) for various processes (Source to Pay, Produce to Deliver, Forecast to Schedule, Order to Cash, etc.).

• Working knowledge and experience with GRC 12.0 tools

• Working knowledge of SAP workstream modules, SoD (segregation of duties) analysis, sensitive transactions analysis, SAP development practices (ABAP), Transport System, Basis Components, (Web Application Server or (WAS), NetWeaver and SAP-GUI)

• Strong knowledge in provisioning to SAP LDAP and SAP Enterprise Portal platforms for ABAP Roles, UME Roles, and Portal Roles/Groups along with IAM integrations, preferably Saviynt

• Experience in IT General Computing Controls and ensuring compliance with SOX requirements.

Skills:

• Proven experience working with business teams to develop, implement, and improve on existing security controls 

• Knowledge of change management processes to ensure that all changes are tested and certified in a consistent manner.

• Background in identifyingand evaluating business & technology risks and be able to raise risk awareness & make recommendations to mitigate these risks while balancing ease of use of the systems.

• Ability to innovate & learn new skills as required in supporting a continually changing technical environment.

• Demonstrated successful interpersonal and communication skills (both verbal and written)

• Strong ability to think logically and analytically, problem-solve, build consensus, and lead initiatives in an organized and efficient manner

• Demonstrated ability to manage multiple projects & work independently

• Ability to travel up to 25%