SAP Security Architect

We are seeking a highly skilled and experienced SAP Security Architect to drive the development and implementation of Security roles for various modules in S/4 HANA.

As a key member of the Ford SAP Platform Services Security & Controls, you can add critical value to the entire organization.

Responsibilities:

• Design, develop, and implement S/4 HANA Fiori Security roles for various functional areas like General Ledger, Accounts Payable, Accounts Receivable, Asset Accounting.
• Support SAP Role administration including configuration of new authorization objects, Master/Derived Roles, Single and Composite roles.
• Troubleshoot authorization issues by using STAUTHTRACE, STUSERTRACE, SU53, and ST01.
• Implement and support SAP GRC (Governance Risk & Compliance) Access Controls 12.0 including ARA, ARM, EAM, and BRM.
• Administer SAP GRC configuration, rule sets, workflows, and approvers for user provisioning, emergency access, and access recertification.
• Maintain GRC master data, run risk analysis, audit, and compliance support activities.
• Build and maintain MSMP Workflows and configure GRC notifications.
• Build rulesets, create custom functions and risks, and adjust existing rulesets according to business needs.
• Plan and execute GRC Upgrade activities.
• Set up and support Sync jobs (Repository, Auth, FF Log, Action Usage).
• Troubleshoot day-to-day Access request-related issues by analyzing audit logs.
• Work closely with Application security team members and support all security work.
• Provide Production Support on a periodic 24x7 support with on-call responsibilities.

Qualifications:

• A degree in Computer Science, Electrical & Electronics engineering, or a closely related discipline.
• Minimum of 12 years of SAP Security experience with at least two full-life cycle implementations.
• Experience in designing, developing, and testing S/4 HANA Security Fiori Roles with Pages & Spaces.
• Experience in security checks on backend S/4 and Front-end Fiori apps to add OData services and related authorizations for end-users.
• Experience in setting up and configuring SAP GRC modules (Access Control, Process Control).
• Experience with troubleshooting workflow issues in GRC User provisioning.
• Experience in SAP BTP, IAG is a plus.