SAP Security Architect - Irving, United States - PrimeSource Building Products

    Default job background
    Description
    Job Description

    Job Description:
    • SAP Security Architect provides best practice recommendations, plans, executions, and documents changes to security in the SAP production environment.
    • Ability to work with other team like basis, HANA DB and AWS for any issues.
    • Review SAP roles, documentation and make recommendations to ensure enhanced security.
    • Determine and develop security architecture approaches and solutions, conduct business reviews, and develop recommendations to enhance enterprise applications.
    • Review enterprise architecture and implement security and identity best practices within SAP environment.
    • Lead and mentor security support teams on methods to streamline daily monitoring and develop metrics to evaluate effectiveness of operational duties.
    • Setup SAP audit logging and perform periodic review of logged activity.
    • Perform annual SAP licensing administration.
    • Configure user provisioning in Control Panel / GRC system and workflow approval process.
    • Perform quarterly Information Technology General Controls (ITGCs) for SAP user access reviews.
    • Perform quarterly privileged access review in SAP systems.
    • Create documentation around processes for provisioning process, conflict management process, and violation mitigation process.
    • Manage Firefighter access requests, and review firefighter audit logging.
    • Extensively performed impact analysis of existing Retail, Supply Chain, SRM,CRM, Procurement and Back Office Inventory Roles
    • Creating users, roles, privileges, packages, schemas as per HANA security development.
    • Good working knowledge of AGR*, USR*, USH* tables
    • Resolving services authorization issue using trace /N/IWFND/ERROR_LOG for Fiori issues.
    • Broad experience in maintaining single, composite, and derived roles using Profile Generator (PFCG).
    • Participate in SAP implementation, function integration testing, and periodic regression testing.
    • Periodically evaluate transaction usage report in SAP systems.
    • Manage user access change requests through company helpdesk requests.
    • Manage SAP developer keys for consultants and SAP support team.
    • Manage process to post credentials to SAP secure area.
    • Perform weekly Early Watch report analysis, identifying necessary security and system changes.
    • Maintain helpdesk resolution within Service Level Agreement (SLA)
    • Research and implement SAP security best practice, policy and procedures.
    • Trouble-shoot SAP system security / access issues
    • Work with team to perform monitoring and continuous SAP Security improvement.
    • Action Oriented: Taking on new opportunities and tough challenges with a sense of urgency, high energy, and
    • enthusiasm.
    • Ensures Accountability: Holding self and others accountable to meet commitments.
    • Collaborates: Building partnerships and working collaboratively with others to meet shared objectives.
    • Decision Quality: Making good and timely decisions that keep the organization moving forward.
    Education Qualifications:
    • Bachelor s degree in a related discipline / bachelor's degree in computer science, or equivalent experience
    • Minimum (5) year experience in SAP Security and or SAP GRC with Requirements Analysis, Functional Design or Application Testing
    Required Skills:
    • Sound knowledge of SAP security design and implementation methodology.
    • Experience in SAP Security authorization concepts across SAP components.
    • Provide support for SAP projects for security role design, development, implementation, and modifications.
    • Extensively performed impact analysis of existing Retail, Supply Chain, SRM,CRM, Procurement and Back Office Inventory Roles
    • Creating users, roles, privileges, packages, schemas as per HANA security development.
    • Worked on HANA DB security, creating roles and users on HABA database level.
    • Experience and knowledge of how to maintain authorizations by transactions through SU24 and experience in using USOBT_C, USOBX_C tables.
    • Experience in designing security processes for user provisioning, segregation of duties frameworks/concepts, security maintenance and over security controls.
    • Knowledge with BASIS and other related security areas
    • Effective verbal and written communication skills.
    • Ability to work within a team environment to achieve objectives.
    • Excellent organizational skills and the ability to successfully manage multiple tasks and priorities.
    • Continuously works on improving own knowledge, skills, and attitude.
    • Ability to manage sensitive/confidential information.
    • Review business requirements and translate into technical specifications.