- Experience coding or scripting for SAP security automation (e.g., mass role updates, SECATT/eCATT).
- Hands-on experience securing SAP Cloud platforms (BTP, SuccessFactors, Ariba).
- Deep familiarity with securing specific modules relevant to our environment (e.g., FI, CO, MM, SD).

Soft Skills

- Team Player & Independent Executor: Strong ability to collaborate seamlessly within cross-functional project teams (working alongside functional analysts and developers), while also possessing the drive and self-direction to execute complex technical tasks independently with minimal supervision.
- Analytical Problem Solving: Exceptional ability to read complex trace files, identify the root cause of missing authorizations, and translate business testing issues into technical SAP authorizations.
- Composure Under Pressure: Ability to rapidly remediate access failures and troubleshoot effectively during highly visible testing phases and critical system go-lives.

1.

Active Role Construction: Utilize PFCG daily to build, update, and maintain Single, Composite, and Derived roles, ensuring business requirements are translated accurately into least-privilege authorization structures.

- Real-Time UAT & Project Support: Work with business testers and functional teams during active SFT/UAT to dynamically adjust roles and instantly unblock failed test scripts.

3.

Advanced Troubleshooting: Investigate and resolve complex,



escalated access issues using diagnostic tools like ST01, STAUTHTRACE, SU53, and SUIM to pinpoint exact missing objects, fields, or activities without over-provisioning access.

4.

System Trace Analysis: Proactively execute, download, and analyze authorization traces for users and system interfaces to uncover hidden access failures, particularly within custom ABAP programs, background jobs, and complex API integrations.

5.

Fiori Security Maintenance: Configure and deploy the SAP Fiori frontend experience daily by mapping and maintaining Catalogs, Groups, Spaces, Pages, and the underlying OData service authorizations.

- GRC Risk Analysis & SoD Checking: Run continuous risk analyses using SAP GRC Access Control (ARA) to evaluate any current role builds or modifications for Segregation of Duties (SoD) conflicts prior to moving them into production.

7.

Organizational Level Management: Meticulously update and maintain organizational level fields (e.g., Company Codes, Plants, Purchasing Orgs) within roles to guarantee strict data siloing and restrict access across different business units.

- Cross-Functional Collaboration: Partner daily with ABAP developers, functional analysts, and business stakeholders to understand recent transaction flows and design the corresponding security concepts from the ground up.

📌 SAP Security / Authorization Consultant (Bengaluru)
🏢 BCE Global Tech
📍 Bengaluru