Senior Developer

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Software Engineering

In short

We are looking for a Senior SAP Security Consultant with extensive experience in SAP S/4HANA Cloud, Private Edition (PCE / RISE with SAP) security, authorizations, and governance. The role involves designing and implementing security frameworks, Fiori Launchpad security, and SAP Access Control (GRC 12.0) solutions. Responsibilities include cloud identity federation, automated user provisioning, and ensuring compliance with SOX 404 and IT General Controls (ITGC).

Responsibilities

Lead the technical architecture, design, and deployment of security, authorizations, and governance frameworks for SAP S/4HANA Cloud PCE.
Build end-to-end authorization architectures, including PFCG roles, Fiori Launchpad security, and SAP Access Control (GRC 12.0).
Drive centralized cloud identity federation and automated user provisioning using SAP Cloud Identity Services (IAS / IPS).
Ensure Segregation of Duties (SOD) compliance, least-privilege principles, and robust audit readiness.
Architect and implement greenfield role design, SAP Fiori UI security, and authorization optimization.
Conduct authorization trace analyses and troubleshoot access defects.
Author security blueprints, cutover checklists, and stabilization runbooks.
Implement Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), and Business Role Management (BRM).
Configure SAP IAS and IPS for identity federation and synchronization.
Lead client discovery workshops and engage with business process owners and functional leads.

Requirements

4-5 years of dedicated, hands-on experience in SAP Security, Authorizations, and Access Governance.
Demonstrated track record of leading at least two (2) full lifecycle greenfield implementations of SAP S/4HANA (preferably PCE / RISE with SAP).
In-depth expertise in S/4HANA role architecture, PFCG maintenance, user administration, SU24 authorization defaults, and transport mechanics in cloud-hosted environments.
Extensive hands-on experience building custom Fiori Business Catalogs, Groups, Spaces, Pages, and managing OData/ICF service authorizations and Fiori Launchpad Content Manager.
Proven expertise in end-to-end configuration and deployment of GRC 12.0 modules: ARA (custom rule-sets), ARM (MSMP & BRFplus), EAM (Firefighter ID/Role), and BRM.
Hands-on experience in configuring SAP IAS (SAML 2.0 / OIDC federation, authentication policies) and SAP IPS (JSON transformation logic, system connectors, and automated sync jobs).
Mastery of security troubleshooting tools and transactions, including ST01, STAUTHTRACE, SU53, SU25, USMM, and Security Audit Log (SM19/SM20).

Benefits

Supercharge your potential.
Find your career.
Find your spark.
A place that knows that helping its customers stay on top starts by putting its people first.
Global technology company with over 230,000 people across 60 countries.
Industry-leading capabilities centered around digital, engineering, cloud and AI.
Broad portfolio of technology services and products.

Skills

SAP S/4HANA CloudSAP FioriSAP Access Control (GRC 12.0)SAP Cloud Identity Services (IAS/IPS)PFCGODataSAML 2.0OIDCSCIMST01SU53USMMSM19SM20

#SAP#Security#S/4HANA Cloud#PCE#RISE with SAP#Authorization#Governance#Fiori#GRC#Cloud Identity Services#IAS#IPS#SOD#ITGC

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website