SAP Security - BW, S4 HANA and SAP BTP

• Location: Raritan, NJ, Onsite- HYBRID
• Skill: Strong SAP Security in the areas of SAPBW, SAP S/4 HANA and SAP BTP(Highest weightage will be on SAP BTP Security).
• Experience 10+Years Overall, of which 2 to 3 years on SAP BTP Security
• Requirement: Immediate

The SAP Security Engineer is responsible for securing the enterprise's hybrid SAP landscape. This role demands expertise in building and managing Role-Based Access Controls (RBAC), implementing Identity and Access Management (IAM) across cloud and on-premise systems, and safeguarding sensitive analytical data.

The consultant should have worked on the SAP S/4 HANA implementation projects as a Security consultant establishing end to end security set up in SAP S/4 HANA as well as in SAP BTP.

Key Responsibilities

SAP BTP Security & Cloud Governance ( Must have )

• Architect and configure SAP Cloud Identity Services (IAS) and Identity Provisioning Services (IPS) to manage user lifecycles across BTP and SaaS applications.
• Secure cloud-to-on-premise connections using SAP Cloud Connector and manage destinations, trust configurations, and OAuth clients.
• Monitor BTP subaccounts, role collections, and ensure compliance with cloud shared-responsibility models. [

SAP S/4HANA & Fiori Security

• Design and maintain Role-Based Access Control (RBAC) and PFCG roles for S/4HANA, including complex custom transactions and Structural Profiles.
• Build and secure SAP Fiori catalogs, groups, and spaces, mapping UI-level access to backend authorization objects.
• Perform Segregation of Duties (SoD) conflict analysis and remediation using tools like SAP GRC or Identity Access Governance (IAG). [

SAP BW (Business Warehouse) & Analytics Security

• Design complex data-level authorizations using Analysis Authorizations (and legacy Reporting Authorizations) in SAP BW and BW/4HANA.
• Secure reporting layers within SAP Analytics Cloud (SAC), managing teams, folders, and data access dimensions.
• Apply strict row-level and column-level security to integrate with backend InfoCubes, DataStore Objects (DSOs), and queries. []

Qualifications & Experience

• Cloud Knowledge: Familiarity with BTP Global Accounts, Subaccounts, Entitlements, and Cloud Foundry security models.
• Analytical Skills: Deep understanding of SAP BW Analysis Authorizations and multi-dimensional security models.
• Certifications: Desirable credentials include SAP Certified Technology Associate (SAP BTP, SAP S/4HANA System Administration, or SAP HANA).