SAP S/4HANA Security Consultant

Client: City of San Antonio
Title: SAP S/4HANA Security Consultant
Location: San Antonio, TX
Duration: 12+ Months Contract

Important Note: The working position is 100% REMOTE.

DESCRIPTION OF SERVICES:
The SAP S/4HANA Security Consultant is responsible for managing and strengthening the security framework across SAP environments. This role focuses on ensuring secure user access, role management, compliance, and authorization processes aligned with business and audit requirements within SAP S/4HANA and related systems.

Key Responsibilities
Design, implement, and maintain SAP S/4HANA security roles, profiles, and authorization concepts.
Work closely with business process owners to understand access requirements and conduct role design workshops.
Perform regular user access reviews and support compliance and audit activities, including SOX controls.
Manage SAP Fiori security by maintaining catalogs, groups, and role assignments.
Troubleshoot authorization issues using tools such as SU53, ST01, and security trace analysis.
Integrate SAP S/4HANA Security with SAP GRC Access Control modules for risk and compliance management.
Support system upgrades, migrations, and testing activities related to security and authorization.
Ensure compliance with Segregation of Duties (SoD) policies and resolve access conflicts.
Create and maintain documentation for security processes, configurations, and policies.

Required Skills
Strong hands-on experience with SAP S/4HANA Security, SAP Fiori Security, and HANA database security.
Experience working with SAP GRC Access Control modules, including ARM, ARA, BRM, and EAM.
Knowledge of Single Sign-On (SSO), SAML, and OAuth authentication technologies.
Excellent communication and documentation skills with the ability to collaborate with auditors, stakeholders, and technical teams.

Qualifications
Bachelor’s degree in Computer Science, Information Systems, or a related field.
5–8 years of experience in SAP Security, including at least 5 years in SAP S/4HANA environments.
SAP Certified Technology Associate – SAP System Security and Authorizations certification is preferred.
Experience with SAP Cloud Identity Services and SAP BTP Security is a plus.