SAP Security Architect

Custom Software Engineer

Project Role : Custom Software Engineer
Project Role Description : Develop custom software solutions to design, code, and enhance components across systems or applications. Use modern frameworks and agile practices to deliver scalable, high-performing solutions tailored to specific business needs.
Must have skills : SAP Governance Risk and Compliance (SAP GRC)
Good to have skills : SAP SLO Upgrades & Migrations
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
As an SAP Security Architect, you will be responsible for defining and governing enterprise-wide SAP role design standards, naming conventions, and authorization frameworks aligned with SAP best practices and regulatory requirements. You will work closely with business, security, and technical teams to establish scalable role models, clear ownership structures, and robust governance processes across SAP landscapes. The role demands strong expertise in SAP authorization design, role rationalization, SoD-aware access models, and Fiori-first security strategies to enable secure, compliant, and future-ready business operations.



Roles & Responsibilities:



Expected to be an SME, collaborate and manage the team to perform.
Responsible for team decisions.
Engage with multiple teams and contribute on key decisions.
Provide solutions to problems for their immediate team and across multiple teams.
Create role design and naming convention documents for master and derived roles aligned to SAP best practices and regulatory expectations.
Define and implement clear RACI across business, security, and basis teams for role ownership, SoD, transport management, and technical deployment.
Adopt SAP-recommended single and derived role models, while restricting composite role usage to temporary aggregation scenarios only where required.
Define global master role templates with entity-specific derived roles and maintain 1:1 mapping for standardization and control.
Perform role rationalization and cleanup using SAP standard role methodology, including differentiation between business roles and technical roles.
Update and maintain living role design documentation with strong change governance linked to transport and role changes.
Drive a Fiori-first approach to establish a future-proof and unified point of access across SAP GUI and Fiori applications.
Support compliance, audit readiness, and sustainable access governance through standardized role design practices.



Professional & Technical Skills:



Must To Have Skills: Proficiency in SAP Security & Authorization, SAP Role Design and Implementation, SAP Fiori Authorization Concepts, Experience in ECC to S4HANA Security Conversion projects, SAP S/4HANA Upgrade Projects, SU25 tool understanding, Role Remediations
Good To Have Skills: Experience with SAP GRC Access Control, Process Control, Segregation of Duties (SoD)
Strong knowledge of SAP authorization concepts, role design standards, and security governance frameworks.
Experience in designing master and derived role strategies for global and local business requirements.
Ability to analyze access requirements and translate them into scalable, compliant SAP security solutions.
Hands-on expertise in role rationalization, cleanup, and standardization using SAP best practices.
Familiarity with role lifecycle governance, transport-linked controls, and change management processes.
Good understanding of SAP Fiori security architecture and access design for both GUI and Fiori-based applications.
Ability to collaborate effectively with cross-functional stakeholders and drive alignment between technical design and business objectives.



Additional Information:



- The candidate should have minimum 10-12 years of experience in SAP Governance Risk and Compliance (SAP GRC).
- This position is based at our Pune , Kolkata, Mumbai location
- A 15 years full time education is required.