11/10/2026 updated
100 % available
SAP Security, GRC & IAM Consultant
Pune, India
Only remote
Bachelor of Engineering in Electronics and Telecommunication Engineering, Walchand Institute of Technology, Solapur (2020-2024)SAP Integration SuiteSAP S/4HANAServiceNow Security OperationsSAP ERPRole-Based Access ControlSecurity Assertion Markup Language (SAML)SAP CRMSAP GRCSAP HANASAP SecuritySAP Solution ManagerIT General Controls (ITGC)SAP Integration SolutionsSAP CertificationSAP BTP
SAP Security & Authorizations
Expertise in SAP ECC and S/4HANA security, including PFCG role design, SU01, SU10, SU24, RBAC, least privilege, single/composite/derived roles, SU53, ST01, STAUTHTRACE and SUIM. Design, build, modify and maintain PFCG roles supporting 3,000+ users across 7 SAP landscapes.
SAP GRC Access Control
Hands-on administration of SAP GRC Access Control modules ARA, ARM, EAM and BRM, including risk analysis, mitigation controls, Firefighter IDs, access requests, provisioning/de-provisioning support, MSMP and BRF+ workflow configuration, SoD ruleset design and connector/connector group maintenance.
IAM & Cloud Security
Experience with SAP Cloud Identity Services (IAS/IPS), SAP Cloud IAG, Joiner-Mover-Leaver lifecycle support, user provisioning/de-provisioning, SAP BTP subaccount access, Cloud Connector and Integration Suite. Implementation of SSO and authentication services with Okta and Microsoft Entra ID, SAML 2.0 and OIDC federation protocols.
SAP Fiori Security
Support of SAP Fiori security including Business Catalogs, Spaces, Pages, Tile/Target Mapping, ICF and OData service activation/support; investigation of authorization issues using SAP trace and error-log tools.
Segregation of Duties (SoD)
Application of SoD principles to role design, assessment of authorization risks before access implementation, SoD analysis/simulation and risk remediation across S/4HANA landscapes.
Governance & Compliance
Support for SOX, ITGC, GDPR and audit requirements, incident resolution, SLA management, UAT, regression testing, cutover and post-go-live support using SAP Solution Manager/ChaRM.
Azure AD & Identity Federation
Implementation of cross-tenant access using Azure AD External Identities to streamline collaboration across different Azure environments and integration of corporate applications with Okta using SAML 2.0 and OIDC.
SAP GUI Scripting
Use of SAP GUI Scripting to automate mass role creation and maintenance, enabling creation of 600+ roles and supporting UAT, regression testing, cutover and post-go-live stabilization.
SAP BTP Security
Administration of SAP BTP subaccount access, Cloud Connector configuration and Integration Suite entitlements/licenses for secure on-premise-to-cloud integration.
Expertise in SAP ECC and S/4HANA security, including PFCG role design, SU01, SU10, SU24, RBAC, least privilege, single/composite/derived roles, SU53, ST01, STAUTHTRACE and SUIM. Design, build, modify and maintain PFCG roles supporting 3,000+ users across 7 SAP landscapes.
SAP GRC Access Control
Hands-on administration of SAP GRC Access Control modules ARA, ARM, EAM and BRM, including risk analysis, mitigation controls, Firefighter IDs, access requests, provisioning/de-provisioning support, MSMP and BRF+ workflow configuration, SoD ruleset design and connector/connector group maintenance.
IAM & Cloud Security
Experience with SAP Cloud Identity Services (IAS/IPS), SAP Cloud IAG, Joiner-Mover-Leaver lifecycle support, user provisioning/de-provisioning, SAP BTP subaccount access, Cloud Connector and Integration Suite. Implementation of SSO and authentication services with Okta and Microsoft Entra ID, SAML 2.0 and OIDC federation protocols.
SAP Fiori Security
Support of SAP Fiori security including Business Catalogs, Spaces, Pages, Tile/Target Mapping, ICF and OData service activation/support; investigation of authorization issues using SAP trace and error-log tools.
Segregation of Duties (SoD)
Application of SoD principles to role design, assessment of authorization risks before access implementation, SoD analysis/simulation and risk remediation across S/4HANA landscapes.
Governance & Compliance
Support for SOX, ITGC, GDPR and audit requirements, incident resolution, SLA management, UAT, regression testing, cutover and post-go-live support using SAP Solution Manager/ChaRM.
Azure AD & Identity Federation
Implementation of cross-tenant access using Azure AD External Identities to streamline collaboration across different Azure environments and integration of corporate applications with Okta using SAML 2.0 and OIDC.
SAP GUI Scripting
Use of SAP GUI Scripting to automate mass role creation and maintenance, enabling creation of 600+ roles and supporting UAT, regression testing, cutover and post-go-live stabilization.
SAP BTP Security
Administration of SAP BTP subaccount access, Cloud Connector configuration and Integration Suite entitlements/licenses for secure on-premise-to-cloud integration.
Languages
EnglishFluent
Project history
Lead and coordinate a 5-member SAP Security team supporting global stakeholders, role delivery, production incidents and knowledge sharing. Managed end-to-end identity lifecycle operations including user onboarding, role changes, access reviews and offboarding in cloud and on-prem environments. Designed and implemented SSO and authentication services with Okta and Microsoft Entra ID. Implemented cross-tenant access using Azure AD External Identities. Integrated client corporate applications with Okta using SAML 2.0 and OIDC. Design, build, modify and maintain single, composite and derived PFCG roles across SAP ECC and S/4HANA supporting 3,000+ users across 7 SAP landscapes. Administer SAP GRC Access Control (ARA, ARM, EAM and BRM), including risk analysis, access requests, Firefighter IDs, mitigation controls and user access reviews. Configure and support ARM workflows using MSMP and BRF+. Support Joiner-Mover-Leaver activities. Support SAP Fiori security including catalogs, spaces, pages, tile/target mappings and OData services.
Provided SAP Security and GRC support for 2,000+ users across S/4HANA landscapes, covering role-based access, provisioning/de-provisioning support and compliance requirements. Designed 400+ SAP roles and supported GRC activities including connector setup, ruleset validation, SoD analysis/simulation, risk remediation and go-live readiness. Supported SAP BTP security by administering subaccount access, Cloud Connector configuration and Integration Suite entitlements/licenses for secure on-premise-to-cloud integration.
Led authorization role restructuring and rollout for 1,000+ users; aligned roles with business processes, RBAC principles and compliance requirements. Used SAP GUI Scripting to automate mass role creation and maintenance, enabling creation of 600+ roles; supported UAT, regression testing, cutover and post-go-live stabilization.