SAP Authorization and Security Specialist

About the role

Bosch Global Software Technologies Private Limited is seeking an SAP Authorization and Security Specialist to support SAP S/4HANA system conversions and rollouts. The role focuses on securing SAP landscapes, optimizing authorizations, and ensuring compliance across global implementations.

Key responsibilities

• Support SAP S/4HANA brownfield upgrades from a security perspective, including impact assessment, role remediation, and authorization optimization.
• Analyze existing SAP ECC roles and redesign them to align with S/4HANA authorization concepts.
• Design and adapt roles for new company codes, plants, sales organizations, or geographic regions while maintaining global security standards.
• Maintain single, derived, and composite roles using PFCG and review SU24 defaults, authorization objects, and role menus.
• Implement and support SAP Fiori security, configuring catalogs, spaces, business roles, and OData service authorizations.
• Perform Segregation of Duties (SoD) risk analysis and remediate conflicts using SAP GRC Access Control.
• Configure and support SAP GRC modules (ARA, ARM, EAM) and assist with role remediation during upgrades and post‑go‑live phases.
• Manage SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS) for authentication policies, federation, SSO, and automated provisioning.
• Support SAP Business Technology Platform (BTP) security administration, including role collections and trust setup with IAS.
• Collaborate with Basis and infrastructure teams to establish secure connectivity and identity federation across SAP solutions.
• Conduct role testing, regression testing, and User Acceptance Testing (UAT) during upgrade and rollout phases.

Required profile

• Hands‑on experience with SAP S/4HANA security and role management.
• Familiarity with SAP GRC Access Control and SoD analysis.
• Ability to work closely with functional, Basis, and infrastructure teams.

Required skills

• SAP S/4HANA security
• SAP ECC role and authorization concepts
• PFCG role maintenance
• SU24 configuration
• SAP Fiori security and OData authorizations
• SAP GRC Access Control (ARA, ARM, EAM)
• Segregation of Duties (SoD) analysis
• SAP Identity Authentication Service (IAS)
• SAP Identity Provisioning Service (IPS)
• SAP Business Technology Platform (BTP) security
• Secure connectivity and identity federation
• Role testing, regression testing, UAT