An SAP Security Architect designs the security architecture for SAP landscapes, covering role design, authorisations, identity and access management, segregation of duties, audit controls and secure operating models.

The role is commonly used on SAP S/4HANA, ECC, SAP GRC, SAP BTP and cloud identity programmes where employers need access to be controlled, compliant, scalable and practical for business users.

• Designing SAP security architecture for S/4HANA, ECC, GRC or IAM programmes
• Preparing access models for SAP S/4HANA migration, RISE with SAP or cloud transition
• Improving role design, authorisations, segregation of duties and audit readiness
• Connecting SAP security with identity services, access governance and business controls
• Reducing security risk across build, test, cutover, go-live and BAU support

• Define SAP security architecture principles, role design standards and access governance controls
• Design authorisation concepts across SAP S/4HANA, ECC, Fiori, BTP and related SAP applications
• Work with security teams, functional consultants, Basis teams, auditors, business owners and implementation partners
• Review role design, segregation of duties, privileged access, identity processes and control requirements
• Support SAP GRC, SAP Cloud Identity Services, Identity Access Governance and BTP security activity where relevant
• Challenge excessive access, weak controls and security designs that create audit or operational risk
• Provide security architecture assurance through design, build, testing, deployment and transition into BAU

• SAP security architecture experience
• Strong understanding of SAP S/4HANA, ECC, SAP GRC and SAP authorisations
• Knowledge of IAM, role design, SoD, access governance and audit controls
• Experience with SAP Fiori, BTP Security or SAP Cloud Identity Services where relevant
• Ability to work across security, functional, technical, audit and supplier teams
• Clear judgement on access risk, compliance, usability and long-term supportability