SAP Security Consultant

About Capgemini :

Capgemini is a global leader in consulting, digital transformation, technology, and engineering services. We harness the power of technology to deliver business value and help organizations accelerate their journey towards innovation.

As a SAP Security Consultant, you will :

• Design, implement and support SAP Security and SAP GRC solutions across S/4HANA, ECC and Fiori environments.
• Manage SAP user administration, role design, role maintenance and authorization concepts.
• Perform user access provisioning, role assignments, access reviews and authorization troubleshooting.
• Configure and support SAP GRC Access Control modules, including Access Risk Analysis, Access Request Management, Business Role Management and Emergency Access Management.
• Design and maintain single, composite and derived roles based on business and compliance requirements.
• Manage Fiori catalogs, groups, spaces, pages, business roles and OData service authorizations.
• Perform Segregation of Duties analysis, identify access risks and coordinate risk remediation or mitigation activities.
• Support SAP security activities related to S/4HANA implementations, upgrades, migrations, rollouts and production support.
• Investigate and resolve authorization issues using tools such as SU53, ST01, STAUTHTRACE and SUIM.
• Work with functional, technical, audit, compliance and business teams to define secure access solutions.
• Support internal and external audits by providing access-control reports, role documentation and remediation evidence.
• Prepare security design documents, role matrices, test scripts, operating procedures and knowledge-transfer materials.
• Participate in testing activities, including unit testing, integration testing, user acceptance testing and regression testing.
• Monitor security controls and recommend improvements aligned with organizational policies and SAP best practices.

Your Role - Job Role

• Own SAP Security and GRC deliverables across implementation and support engagements.
• Analyze business requirements and translate them into secure, scalable SAP roles and authorization solutions.
• Lead or support role redesign, access remediation and authorization-cleanup initiatives.
• Configure SAP GRC workflows, connectors, rulesets, mitigating controls and firefighter access.
• Ensure compliance with Segregation of Duties, audit requirements and enterprise access-governance policies.
• Coordinate with SAP Basis, functional and development teams to resolve complex access and authorization issues.
• Provide guidance to junior consultants and conduct knowledge-sharing sessions when required.
• Track incidents and service requests, meet agreed service levels and provide timely updates to stakeholders.
• Communicate effectively with business users, control owners, auditors and project leadership.

Your Profile - Skills Required :

• 4–12 years of relevant experience in SAP Security and SAP GRC Access Control.
• Strong hands-on experience with SAP S/4HANA, SAP ECC and SAP Fiori security.
• Good understanding of SAP authorization concepts, user administration, role design and profile generation.
• Hands-on experience with SAP GRC Access Control, preferably versions 10.x or 12.x.
• Experience in Access Risk Analysis, Access Request Management, Business Role Management and Emergency Access Management.
• Strong knowledge of Segregation of Duties rulesets, risk analysis, mitigation controls and access-certification processes.
• Experience with Fiori roles, catalogs, groups, spaces, pages, tiles, OData services and Gateway authorizations.
• Knowledge of S/4HANA authorization objects, business roles and migration-related security activities.
• Proficiency in SAP security troubleshooting using SU53, SUIM, ST01, STAUTHTRACE, PFCG and related tools.
• Experience in SAP security implementations, upgrades, rollouts, migrations or application-support engagements.
• Understanding of transport management, change management and security testing processes.
• Exposure to SAP HANA database security, SAP Cloud Identity Services or SAP BTP security will be an advantage.
• Ability to prepare technical documentation and communicate clearly with technical and non-technical stakeholders.
• Strong analytical, problem-solving, stakeholder-management and interpersonal skills.
• Willingness to work from Bangalore, Pune, Mumbai or Gandhinagar, depending on project requirements.

What will you love working at Capgemini - PVP:

• Opportunities to work with global clients on innovative SAP projects.
• Dynamic and inclusive workplace culture.
• Continuous learning and professional development support.

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.