Design and maintain SAP authorization concepts and role structures aligned with
business processes and least-privilege principles
Build and maintain master, derived, composite, and business roles for S/4HANA,
and Fiori applications
Configure and operate SAP GRC Access Control (ARA, ARM, BRM, EAM),
including ruleset management, mitigating controls, and emergency access
management
Perform segregation-of-duties analysis and remediation in collaboration with
business process owners and internal audit
Configure user provisioning workflows in SAP GRC ARM, including request
types, approval paths, and integration with IDM/IAM platforms
Operate SAP GRC Process Control for continuous controls monitoring and policy
management
Implement security for Fiori applications, including catalogs, groups, and front-
end authorizations
Configure and operate security for SAP BTP and cloud applications using
XSUAA, IAS, and IPS
Support SAP audits (SOX, GxP, PCI) and respond to audit findings with
documented remediation plans
Maintain comprehensive, current technical documentation — including
architecture diagrams, design decisions, configuration references, runbooks, and
operational procedures — so that the system remains supportable, auditable,
and easy to onboard new engineers onto over time
