SAP Security Architect

Brief Description

SAP Security Architect

Location: Manchester, United Kingdom

Employment Type: Full Time, Permanent

Secure the Future of Enterprise SAP

At ESP Global Services, we deliver mission-critical technology services to some of the world's most recognised organisations. As our customers continue to modernise their SAP estates, we are seeking an experienced SAP Security Architect to lead the design, governance and implementation of enterprise security solutions across complex SAP landscapes.

This is an opportunity to shape security strategy during large-scale SAP transformation programmes, including ECC to SAP S/4HANA migrations, while working alongside experienced enterprise architects, infrastructure specialists and business stakeholders.

If you enjoy solving complex security challenges, influencing enterprise architecture and delivering secure-by-design SAP environments, we'd like to hear from you.

The Role

As SAP Security Architect, you will own the security architecture for SAP platforms, ensuring security, compliance and governance are embedded throughout the solution lifecycle.

You will provide technical leadership across both existing SAP ECC environments and future SAP S/4HANA platforms, helping customers modernise their security model whilst maintaining business continuity and regulatory compliance.

Working closely with project teams, enterprise architects, infrastructure teams and business stakeholders, you will design scalable security frameworks that support both cloud and hybrid SAP environments.

Key Responsibilities

You Will Be Responsible For

• Designing enterprise SAP security architectures across SAP ECC, SAP S/4HANA and hybrid cloud environments.
• Developing and governing SAP authorisation strategies, role design and access management standards.
• Designing and maintaining Segregation of Duties (SoD) controls and governance frameworks.

Configuring and governing SAP security roles across SAP ECC, SAP S/4HANA, SAP Fiori and SAP GRC.

Integrating SAP environments with enterprise Identity and Access Management (IAM) platforms using Single Sign-On (SSO), SAML and related authentication technologies.

Leading SAP security risk assessments, vulnerability analysis and remediation activities.

Supporting audit readiness and ensuring compliance with regulatory and corporate security standards.

Working with technical and business stakeholders to deliver secure solutions aligned to enterprise architecture.

SAP ECC to SAP S/4HANA Migration Responsibilities

A significant aspect of this role is supporting enterprise transformation programmes.

You Will

• Design the security strategy for SAP ECC to SAP S/4HANA migrations.
• Redesign legacy SAP ECC roles into modern SAP S/4HANA and SAP Fiori authorisation models.
• Develop SAP HANA database security, user management and analytical privilege models.
• Lead the redesign of Segregation of Duties (SoD) rule sets during business process transformation.
• Integrate legacy and modern SAP platforms with enterprise IAM solutions.
• Conduct threat modelling and security assessments throughout the migration lifecycle.
• Ensure secure transition from traditional ABAP security models to modern SAP HANA and cloud security frameworks.
• Support programme governance, risk management and architecture decision making.
  
  

About You

We're looking for an experienced SAP Security professional who combines deep technical expertise with strong architecture and stakeholder management skills.

You Will Bring

• Minimum 10–12 years' experience in SAP Security.
• Proven experience delivering at least one full lifecycle SAP ECC to SAP S/4HANA migration.
• Strong experience designing enterprise SAP security architectures.

Expert knowledge of SAP authorisations and role design.

Advanced knowledge of SAP HANA database security.

Strong experience with SAP GRC Access Control and Process Control.

Experience implementing SAP Fiori security, catalogues, groups and OData services.

Knowledge of SU24 authorisation object maintenance and custom transaction (Z-code) remediation.

Experience integrating SAP with enterprise IAM solutions and Single Sign-On technologies.

Strong understanding of security governance, audit and compliance frameworks including SOX and GDPR.

Excellent communication skills with the ability to influence both technical and business stakeholders.

Desirable Experience

Experience with one or more of the following would be advantageous:

• SAP BTP security
• Cloud security architecture (Azure, AWS or Google Cloud)
• Microsoft Entra ID (Azure AD)
• Identity Governance and Administration (IGA) platforms
• Cyber security architecture
• Enterprise Architecture frameworks (TOGAF or equivalent)
• Security certifications such as CISSP, CISM or SAP Security certifications
  
  

Requirements

Why Join ESP Global Services?

ESP Global Services is a leading provider of IT managed services, delivering innovative technology solutions to customers across aviation, retail, pharmaceuticals, logistics, financial services and other global industries.

You'll join an organisation where innovation, collaboration and customer success are at the heart of everything we do.

We Offer

• Competitive salary and benefits package.
• Opportunities to work on large-scale global transformation programmes.
• Exposure to enterprise cloud and digital transformation initiatives.
• Professional development and certification support.
• A collaborative and supportive international team.
• Career progression within a growing global technology business.
  
  

Ready to Apply?

If you're passionate about SAP Security Architecture and want to help deliver secure enterprise transformation programmes for global organisations, we'd love to hear from you.

Apply today and help shape the future of secure SAP environments at ESP Global Services.