Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : SAP Security
Good to have skills : NA
Minimum 15 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
The SAP BASIS & Security Engineer / Architect is a critical technical role responsible for the stability, performance, security, and governance of the organisation's SAP landscape. This spans on-premise systems (ECC, S/4HANA), SAP BTP, cloud-hosted environments, and any hybrid configurations within a RISE with SAP or hyperscaler deployment model.
This role is not purely operational — it requires architectural thinking, proactive risk management, and the ability to design robust, scalable, and compliant SAP platforms. The successful candidate will also leverage AI-powered tools and automation to modernise platform operations and strengthen the security posture.
The SAP platform underpins mission-critical business processes across Finance, Supply Chain, HR, and beyond. Any instability, security breach, or compliance failure has direct operational and regulatory consequences. This role ensures:
The SAP landscape is always available, performant, and resilient
Access controls are correctly designed, enforced, and auditable
Segregation of Duties (SoD) conflicts are prevented, detected, and remediated
Upgrades, patches, and migrations are delivered safely and with minimal business disruption
The organisation's SAP environment evolves confidently into cloud and AI-enabled architectures

Roles & Responsibilities:
Own and manage the full SAP system landscape, including development, QA, pre-production, and production environments
Perform system monitoring, performance tuning, and capacity planning across ABAP, Java, and HANA stacks
Manage transport management system (TMS) — including CTS, CTS+, and gCTS — ensuring controlled, auditable change delivery across landscapes
Execute and manage system copies, client copies, and landscape refreshes in line with business and compliance requirements
Plan and deliver system upgrades, support package stacks (SPS), kernel patches, and third-party component updates with minimal downtime
Configure and manage high availability (HA) and disaster recovery (DR) solutions — including System Replication, Pacemaker, and MCOD setups
Administer SAP HANA database: backup/recovery, space management, delta merge, performance analysis, and alert monitoring
Manage SAP Solution Manager / Cloud ALM for system monitoring, change management, and service desk integration
Support cloud migration activities — including RISE with SAP, AWS, Azure, and GCP-hosted SAP landscapes
Design, build, and maintain SAP role concepts — including composite roles, derived roles aligned to business process and least-privilege principles
Manage the full security lifecycle: role creation, user provisioning, access reviews, role remediation, and decommissioning
Perform authorisation analysis and troubleshooting using SU53, ST01, and authorisation trace tools
Design and govern security across S/4HANA Fiori — including Fiori launchpad configuration, OData service authorisations, and tile catalogue management
Maintain and govern security in BTP environments — including trust configuration, subaccount management, and BTP role collections
Ensure security standards are embedded in every transport and configuration change — acting as a gatekeeper for access governance
Lead or support security aspects of SAP upgrades, migrations, and new module implementations

Professional & Technical Skills:
9+ years of hands-on SAP BASIS experience across at least two of: ECC, S/4HANA (on-premise or cloud), BW/4HANA, or SAP HANA
Strong experience with SAP HANA database administration (backup, recovery, performance, HA/DR)
Experience with transport management, system copies, and landscape management
Familiarity with SAP Solution Manager or Cloud ALM for change and monitoring
Exposure to cloud-hosted SAP environments (RISE with SAP, Azure, AWS, or GCP)
Strong SAP authorisation and role design experience — including profile generator (PFCG), SU01/SU10, and authorisation object management
Hands-on experience with SAP Fiori security — launchpad, catalogue, OData authorisations
Experience with SAP GRC Access Control (v10.x or v12.x) — ARM, ARA, EAM, BRM modules
Understanding of SoD principles and their application in SAP landscapes
Knowledge of regulatory compliance requirements relevant to SAP access (SOX, GDPR, ISO 27001)

Essential — AI & Automation
Active user of generative AI tools (Copilot, Claude, ChatGPT, or similar) for technical and operational tasks
Familiarity with scripting and automation — Python, Shell scripting, or SAP-native automation tools
Awareness of SAP's AI strategy — SAP Joule, BTP AI services, and embedded analytics
Openness to experimenting with AI-driven monitoring, alerting, and self-healing approaches

Desirable
SAP Certified Technology Associate or Professional (BASIS or Security)
Experience with SAP Identity Access Governance (IAG) on BTP
Knowledge of SAP BTP security — trust configuration, role collections, subaccount structure
Experience in regulated industries — financial services, pharma, public sector, utilities
Familiarity with ITIL and experience working in ITIL-aligned IT operations teams
Exposure to SAP Business Integrity Screening or SAP Enterprise Threat Detection

Additional Information:
- A 15 years full time education is required.

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com 

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.