Senior Developer

Job description

We are seeking a seasoned, hands-on SAP Security Senior Consultant to lead the technical architecture, design, and deployment of security, authorizations, and governance frameworks for enterprise-scale greenfield SAP S/4HANA Cloud, Private Edition (PCE / RISE with SAP) implementations. In this strategic role, the Senior Consultant will serve as the core Subject Matter Expert (SME) responsible for building end-to-end authorization architectures from the ground up. This encompasses building compliant task- and job-based PFCG role structures, modern SAP Fiori Launchpad security (Catalogs, Groups, Spaces, and Pages), and enterprise-grade SAP Access Control (GRC 12.0) suites. In addition, the role drives centralized cloud identity federation and automated user provisioning leveraging SAP Cloud Identity Services (IAS / IPS) in hybrid cloud landscapes, ensuring Segregation of Duties (SOD) compliance, least-privilege principles, and robust audit readiness. Key Responsibilities A. Greenfield S/4HANA & SAP Fiori Security Architecture: ● End-to-End Greenfield Role Design: Architect and implement clean, scalable authorization concepts (single, derived, and composite business roles) tailored to greenfield S/4HANA Private Cloud Edition (PCE) environments. ● SAP Fiori UI Security Architecture: Design, build, and maintain Fiori Launchpad access frameworks, including Business Catalogs, Technical Catalogs, Business Groups, Spaces, and Pages. ● Authorization Optimization (SU24/SU25): Establish robust SU24 authorization default maintenance protocols; secure OData services (v2 and v4), CDS views, RFC interfaces, and Web Dynpro ABAP applications. ● Troubleshooting & Diagnostics: Conduct in-depth authorization trace analyses using ST01, STAUTHTRACE, and SU53 to rapidly diagnose and resolve access defects during project build, SIT, and UAT cycles. ● Security Runbooks & Cutover Execution: Author comprehensive security blueprints, cutover checklists, stabilization runbooks, and transport management strategies across multi-tier landscape architectures." B. SAP Access Control Implementation & Governance: ● Access Risk Analysis (ARA): Build, customize, and validate comprehensive SOD rule-sets; establish critical actions/permissions matrices, risk classifications, and automated mitigating controls. ● Emergency Access Management (EAM): Design and configure Firefighter (ID and Role-based) architectures, decentralized FF access, firefighter log review workflows, and reason code definitions. ● Access Request Management (ARM): Architect multi-stage multi-path (MSMP) workflow paths, BRFplus decision tables/business rules, and compliant end-to-end provisioning flows. ● Business Role Management (BRM): Implement role lifecycle governance, automated SOD simulations, role approval workflows, and role ownership matrices. ● Audit & Compliance Alignment: Ensure all authorization models and GRC rule-sets strictly adhere to internal control frameworks, Sox 404 compliance, and IT General Controls (ITGC)." C. SAP Cloud Identity Services (IAS / IPS) Integration: ● Identity Authentication Service (IAS): Configure SAP IAS as an Identity Provider (IdP) or Identity Proxy federated with enterprise Corporate IdPs (e.g., Microsoft Entra ID / Azure AD, Okta, Ping Identity) using SAML 2.0 and OIDC protocols. ● Identity Provisioning Service (IPS): Design and configure IPS source/target connectors, JSON transformation scripts, schema mappings, and automated synchronization jobs across on-premise and cloud target systems. ● Identity Lifecycle & Attributes: Manage end-to-end identity lifecycle events, Name ID mapping, SCIM APIs, and user attribute transformations between corporate directories and SAP applications." D. Stakeholder Engagement, Delivery & Advisory: ● Advisory & Workshops: Lead client discovery workshops, design-thinking sessions, and security walkthroughs with business process owners, functional leads, and Basis/Infrastructure teams. ● Project Deliverables Management: Formulate Deliverable Expectation Documents (DED), functional/technical specifications, security test strategies, and remediation roadmaps. ● Audit Coordination: Collaborate with external and internal audit stakeholders to validate least-privilege configurations, privileged access controls, and remediation evidence." Skill Requirements Core Experience: 4-5 years of dedicated, hands-on experience in SAP Security, Authorizations, and Access Governance. Greenfield Lifecycle Experience: Demonstrated track record of playing a lead role in at least two (2) full lifecycle greenfield implementations of SAP S/4HANA (preferably Private Cloud Edition / RISE with SAP). S/4HANA Private Cloud Expertise: In-depth expertise in S/4HANA role architecture, PFCG maintenance, user administration, SU24 authorization defaults, and transport mechanics in cloud-hosted environments." SAP Fiori Security Proficiency: Extensive hands-on experience building custom Fiori Business Catalogs, Groups, Spaces, Pages, and managing OData/ICF service authorizations and Fiori Launchpad Content Manager. SAP Access Control (GRC v12.0) / IAG: Proven expertise in end-to-end configuration and deployment of GRC 12.0 modules: ARA (custom rule-sets), ARM (MSMP & BRFplus), EAM (Firefighter ID/Role), and BRM." SAP Cloud Identity Services (IAS & IPS): Hands-on experience in configuring SAP IAS (SAML 2.0 / OIDC federation, authentication policies) and SAP IPS (JSON transformation logic, system connectors, and automated sync jobs). Diagnostic & Security Tooling: Mastery of security troubleshooting tools and transactions, including ST01, STAUTHTRACE, SU53, SU25, USMM, and Security Audit Log (SM19/SM20). Other Requirements Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance,