SAP Developer

We are looking for an experienced SAP Developer with strong hands-on expertise in SAP Security and SAP Governance, Risk, and Compliance (GRC). The ideal candidate will be responsible for designing, developing, configuring, and maintaining SAP security roles, access controls, authorization objects, and GRC solutions to ensure secure and compliant access across SAP applications.

The role will support enterprise ERP transformation initiatives, security enhancements, access governance, and ongoing production support. The candidate will work closely with functional teams, business stakeholders, internal audit, and compliance teams to implement effective security controls, minimize access risks, and maintain compliance with organizational policies and audit requirements.

SAP Security & Authorization Development

• Design, develop, configure, and maintain SAP security roles, composite roles, derived roles, and authorization profiles.

• Manage user provisioning, role assignments, authorization objects, and access requests across SAP environments.

• Work with SAP authorization concepts, including PFCG, SU24, SU01, SU53, and ST01, to troubleshoot and resolve authorization issues.

• Support SAP ECC and/or SAP S/4HANA security, including SAP Fiori applications, catalogs, groups, and authorization roles, as applicable.

• Perform role modifications, security testing, transport management, and deployment of security changes across development, quality assurance, and production environments.

• Analyze authorization failures and implement appropriate fixes while following change management procedures.

SAP GRC & Access Control

• Configure, enhance, and support SAP GRC Access Control solutions, including:

  • ARA (Access Risk Analysis):Identify and analyze Segregation of Duties (SoD) conflicts, critical access risks, and sensitive permissions.

  • ARM (Access Request Management):Manage and configure access request workflows, approvals, and provisioning processes.

  • EAM (Emergency Access Management):Administer Firefighter access, controller assignments, usage logs, and review processes.

  • BRM (Business Role Management):Support business role definition, role lifecycle management, and governance.

• Maintain and customize SoD rulesets, risk definitions, functions, and mitigation controls.

• Perform access risk analysis, role simulations, and remediation of identified security conflicts.

• Support User Access Reviews (UAR), periodic access certifications, and emergency access reviews.

• Troubleshoot GRC workflow, integration, provisioning, and authorization issues.

Compliance, Audit & Risk Management

• Support SOX-related controls, internal audits, external audits, and compliance assessments where applicable.

• Maintain evidence for access reviews, role approvals, emergency access usage, and security changes.

• Ensure appropriate segregation between business-critical activities and sensitive transactions.

• Identify opportunities to strengthen access governance and reduce security risks.

• Collaborate with auditors and business process owners to resolve findings and implement corrective actions.

Development, Integration & Production Support

• Analyze security requirements and translate them into technical configurations and development specifications.

• Support security integration with connected SAP applications and identity or provisioning systems, where applicable.

• Work with SAP technical and functional teams to resolve access issues affecting business processes such as finance, procurement, inventory, order management, and supply chain.

• Participate in system upgrades, ERP implementations, security testing, cutover activities, and post-go-live stabilization.

• Follow ITSM processes for incident, problem, change, and release management.

• Maintain technical documentation, configuration records, and operational procedures.

Required Technical Skills

• Strong hands-on experience in SAP Security and SAP GRC Access Control.

• Experience with SAP GRC Access Control 10.x/12.0 or relevant versions; experience with the client's deployed version is preferred.

• Strong understanding of SAP role design, authorization objects, profiles, user administration, and role maintenance.

• Practical experience with PFCG, SU24, SU01, SU53, and authorization troubleshooting.

• Experience with GRC ARA, ARM, EAM, and BRM.

• Knowledge of SoD analysis, risk rulesets, mitigation controls, access request workflows, and user access reviews.

• Experience supporting SAP ECC and/or SAP S/4HANA security.

• Understanding of SAP transport management, change control, testing, and production deployment processes.

• Knowledge of audit requirements, security controls, and compliance processes.

• Strong troubleshooting, analytical, documentation, and stakeholder communication skills.

Originally posted on Himalayas