Consultant
KPMG Global Services (KGS) · Consulting & Professional Services
- Bangalore, Karnataka, India
- On-site
- Posted today
- Apply by 12 Nov
- Consulting & Strategy
About the job
We are seeking an experienced SAP S/4HANA Security Consultant with 4-7 years of hands-on expertise in SAP S/4HANA Public Cloud security to join our growing SAP practice. The successful candidate will be responsible for designing, implementing, and maintaining security and authorization frameworks for SAP S/4HANA Public Cloud environments, ensuring compliance with best practices, segregation of duties (SoD), and client-specific requirements.
Design and implement role-based authorization concepts for SAP S/4HANA Public Cloud using Business Roles, Business Catalogs, and Restriction Types.
Configure and manage business users, business roles, and authorizations via the Identity Access Management (IAM) apps in Fiori Launchpad.
Integrate SAP S/4HANA Public Cloud with SAP Cloud Identity Services (IAS/IPS) for single sign-on (SSO) and user provisioning.
Perform Segregation of Duties (SoD) analysis and remediation; collaborate with GRC teams where applicable.
Participate in all phases of SAP implementation (SAP Activate methodology): Discover, Prepare, Explore, Realize, Deploy, and Run.
Conduct security workshops, requirements gathering, and user training sessions.
Document security designs, role matrices, authorization concepts, and operational procedures.
Troubleshoot and resolve authorization issues, working closely with functional and technical teams.
Support audit and compliance activities, including SOX, GDPR, and internal control reviews.
Stay current with SAP's quarterly release updates for Public Cloud and assess security impacts.
5+ years of SAP Security experience, with a minimum of 1–2 years in SAP S/4HANA Public Cloud security.
Strong knowledge of Business Roles, Business Catalogs, Restrictions, and Spaces/Pages in S/4HANA Public Cloud.
Experience with SAP Fiori Launchpad security and app-level authorizations.
Hands-on experience with SAP Cloud Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
Understanding of SAP Activate methodology and cloud implementation lifecycle.
Familiarity with SAP BTP (Business Technology Platform) security concepts.
Knowledge of SoD frameworks and tools (e.g., SAP Access Control, Pathlock, or equivalent).
Excellent documentation, communication, and stakeholder management skills