SAP Authorization and Security Specialist

About the role

We are looking for an SAP Authorization and Security Specialist to join Bosch’s software technology hub in Bangalore. The role focuses on securing SAP S/4HANA conversions, rollouts and cloud integrations while maintaining global security standards.

Key responsibilities

• Support SAP S/4HANA system conversion (Brownfield/Upgrade) from a security perspective, including impact assessment, role remediation and authorization optimization.
• Analyze existing SAP ECC roles and authorizations, redesign and optimize them for S/4HANA.
• Design and adapt roles for new company codes, plants, sales organizations or geographic regions during S/4HANA rollouts.
• Maintain single, derived and composite roles using PFCG, ensuring alignment with organizational structure.
• Review and update SU24 authorization defaults, objects and role menus as part of conversion activities.
• Implement and support SAP Fiori security, configuring catalogs, spaces, business roles and OData service authorizations.
• Perform Segregation of Duties (SoD) risk analysis and remediate conflicts using SAP GRC Access Control.
• Configure and support SAP GRC modules: Access Risk Analysis (ARA), Access Request Management (ARM) and Emergency Access Management (EAM).
• Configure SAP Identity Authentication Service (IAS) for authentication policies, identity federation and Single Sign‑On.
• Set up SAP Identity Provisioning Service (IPS) for automated user and role provisioning.
• Administer SAP Business Technology Platform (BTP) security, including role collections and sub‑account configuration.
• Collaborate with Basis and infrastructure teams to establish secure connectivity and identity federation across SAP landscapes.
• Support role testing, regression testing and User Acceptance Testing (UAT) during upgrades and rollouts.
• Assist functional teams in resolving authorization issues arising from S/4HANA simplifications or new applications.

Required profile

• Demonstrated experience with SAP S/4HANA security and authorizations.
• Hands‑on knowledge of SAP GRC Access Control modules (ARA, ARM, EAM).
• Familiarity with SAP Identity services (IAS, IPS) and SAP BTP security concepts.

Required skills

• SAP S/4HANA
• SAP ECC
• PFCG role management
• SU24 authorization defaults
• SAP Fiori security
• SAP GRC Access Control (ARA, ARM, EAM)
• Segregation of Duties (SoD) analysis
• SAP Identity Authentication Service (IAS)
• SAP Identity Provisioning Service (IPS)
• SAP Business Technology Platform (BTP) security
• SAP Basis integration
• Role testing, regression testing, User Acceptance Testing (UAT)