TRPD-26-04197
SAP Security, GRC & Fiori Security Consultant (incl. SAP BTP Security)
Hire an SAP Security consultant to design, implement, and support roles/authorizations and user administration across SAP ECC/S/4HANA and related systems, deliver SAP GRC Access Control (ARA/ARM/EAM/BRM) and SoD compliance, and own Fiori/Gateway security (catalogs/spaces/pages, OData/ICF). The role also supports audits, security standards/governance, upgrade/migration testing (ECC to S/4HANA), and IAM integrations including SAP IDM/IAS/IPS plus SAP BTP security (subaccounts, role collections, SSO/federation).
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Full Time
- Experience
- Minimum 8 years and Maximum 12 years
Role overview
Why This Role Matters.
Hire an SAP Security consultant to design, implement, and support roles/authorizations and user administration across SAP ECC/S/4HANA and related systems, deliver SAP GRC Access Control (ARA/ARM/EAM/BRM) and SoD compliance, and own Fiori/Gateway security (catalogs/spaces/pages, OData/ICF). The role also supports audits, security standards/governance, upgrade/migration testing (ECC to S/4HANA), and IAM integrations including SAP IDM/IAS/IPS plus SAP BTP security (subaccounts, role collections, SSO/federation).
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
Perform user administration activities including user provisioning, modifications, deactivation, and access reviews in compliance with security policies.
Develop and maintain single, composite, derived, and master roles based on business requirements and segregation of duties principles.
Conduct SAP authorization analysis and troubleshooting using tools such as SU53, ST01, SUIM, PFCG, and security audit logs.
Implement and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
Perform Segregation of Duties (SoD) risk analysis, remediation, mitigation control reviews, and compliance reporting.
Collaborate with business stakeholders, auditors, and functional teams to ensure security controls meet regulatory and organizational requirements.
Support internal and external audits by providing security documentation, user access reports, role design evidence, and compliance assessments.
Design and maintain SAP Fiori security architecture, including catalogs, groups/spaces, pages, business roles, and OData service authorizations.
Configure and troubleshoot SAP Gateway and Fiori Launchpad security issues, including activation of OData services and ICF services.
Perform security testing and validation for SAP upgrades, enhancement packs, support packs, and transformation projects such as ECC to S/4HANA migrations.
Analyze and optimize role design to ensure least-privilege access while improving operational efficiency and reducing security risks.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
SAP Security
SAP GRC Access Control
ARA
ARM
EAM
BRM
SoD
PFCG
SU53
ST01
SUIM
Security Audit Log
SAP ECC
SAP S/4HANA
SAP BW
SAP CRM
SAP SCM
SAP Fiori
Fiori Launchpad
SAP Gateway
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
SAP Security role and authorization design (PFCG)
User administration (provisioning, modification, deactivation, access reviews)
SAP authorization troubleshooting and analysis (SU53, ST01, SUIM, security audit logs)
SAP GRC Access Control (ARA, ARM, EAM, BRM)
Segregation of Duties (SoD) analysis, remediation/mitigation, compliance reporting
SAP Fiori security (catalogs, groups/spaces, pages, business roles, OData authorizations)
SAP Gateway/Fiori Launchpad security troubleshooting (OData and ICF service activation)
Audit support (documentation, access reports, role design evidence)
Security testing/validation for upgrades/support packs and transformation projects (ECC to S/4HANA)
SAP IAM integrations (SAP IDM, IAS, IPS, SSO/federated identity)
SAP BTP security (global accounts/subaccounts, role collections, authorization assignments)
Preferred
Nice to Have
Security standards/SOPs and governance process development
Least-privilege role optimization and operational efficiency improvements
Experience collaborating with auditors and business stakeholders
Third-party provisioning solutions integration
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for SAP Security, GRC & Fiori Security Consultant (incl. SAP BTP Security)
One page, about two minutes. We only ask for what we actually need to have a first conversation.