07.09.2026 aktualisiert
nicht verfügbar
info: nicht verfügbar bis 01.12.2026
SAP Security & Authorization Expert | BTP | S/4HANA | GRC | EmpowerID
Duisburg, Deutschland
Duisburg +100 km
B.Tech – Mechanical Engineering (2008), KLCE – Acharya Nagarjuna University, GunturÜber mich
As an SAP Security Expert with 17+ years of experience, I help businesses secure their modern SAP landscapes. My expertise spans SAP BTP, S/4HANA, Fiori, and GRC. I specialize in building custom automation tools to speed up deployments, lower overhead, and guarantee compliance.
Skills
SAP GRCSAP SecuritySAP BTPSAP FioriSAP Ariba
SAP BTP / S/4HANA / ECC Authorization
Comprehensive expertise in designing and implementing SAP Authorization Frameworks across BTP, S/4HANA, and ECC, including hybrid on-premise/cloud environments and end-to-end Identity Provisioning Service (IPS/IAS) integration.
SAP GRC AC 10 (ARA / EAM / ARM)
Deep-dive knowledge in configuring and operating SAP GRC Access Control 10, including Access Risk Analysis (ARA), Emergency Access Management (EAM), and Access Request Management (ARM) to guarantee SoD compliance and audit readiness.
SAP Fiori Authorization & EmpowerID
Proven experience managing SAP Fiori authorizations for 200+ hybrid applications and handling full business role lifecycles via EmpowerID, including daily incident management and steady-state operations.
Identity Provisioning (IPS / IAS)
Hands-on experience implementing SAP Identity Provisioning Services, resolving critical SAML assertion issues, and ensuring seamless EmpowerID-to-SAP-BTP integrations.
SoD Compliance & Audit Management
Executing Internal Control System (ICS) activities (monthly & annual controls), analyzing SOX/GRC and SoD reports, and implementing risk-mitigation strategies to achieve full SOX compliance.
SAP HR Security
Designing and deploying tailored SAP HR authorization concepts for highly regulated systems, taking full ownership of the HR security framework.
GxP Regulatory Compliance
Ensuring end-to-end GxP regulatory compliance across all security-related workflows while maintaining audit-ready documentation and fully traceable change records.
SAP Basis Administration
Managing user/role administration, RFC configurations, system copies, and the implementation of critical SAP Security Notes across complex landscapes.
SAPGUI Scripting & Automation
Automating repetitive authorization workflows using SAPGUI scripting, measurably reducing manual operational efforts by up to 40%.
Pathlock (Greenlight) / Xiting
Leveraging Pathlock (Greenlight) environments to build advanced security frameworks, such as securing SAP Ariba environments via SAP GRC.
Central User Administration (CUA)
Implementing Central User Administration (CUA) across 25+ distinct SAP systems to maximize enterprise-wide administration efficiency.
Authorization GPT & AI Tooling
Developing custom Authorization GPT/AI tools to enable team self-service on query resolution, freeing up 30% of team capacity for compliance-critical tasks.
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2026
Sprachen
DeutschgutEnglischverhandlungssicher
Projekthistorie
Leitung der end-to-end SAP IPS-Implementierung, Verwaltung von SAP Fiori-Autorisierungen fuer 200+ hybride Apps, Entwicklung eines Automatisierungstools zur Reduzierung des manuellen Aufwands um 70%, Re-Engineering der SAP Authorization Deployment Pipeline, Erstellung eines Authorization GPT-Tools sowie vollstaendiges Lifecycle-Management von Business Roles via EmpowerID.
Embedded SAP Authorization Architect bei Bayer GmbH fuer 5 Jahre, verantwortlich fuer das gesamte Autorisierungsframework fuer HR und regulierte SAP-Systeme. Implementierung von SAP BTP-Autorisierungskonzepten inkl. IPS-Integration, Sicherstellung der GxP-Compliance, Fuehrung eines Teams von 6 SAP Security Engineers sowie Gestaltung des Security Frameworks fuer das Ariba-System via SAP GRC und Pathlock.
Entwicklung eines umfassenden Security Frameworks und von Rollen fuer SAP ECC-Module im Fertigungsbereich. Konfiguration von SAP GRC AC 10 (ARA, EAM, ARM) zur Etablierung robuster SoD-Governance und Compliance-Kontrollen sowie Analyse von SOX/GRC- und SoD-Berichten mit Umsetzung von Risikominderungsmassnahmen.