SAP CFIN Basis & Security Architect

SAP Basis & Security Architect
Every SAP transformation runs on something and you're the one who decides what that something looks like. As our SAP Basis & Security Architect, you'll be the technical authority on all Basis, landscape, and security design decisions across our S/4 HANA and Central Finance programmes. You'll define how systems are built, how they're secured, and how they perform from the first landscape design conversation through to go-live and beyond. You're the person the project calls when challenging technical questions need a definitive answer.
Location: Hybrid / Remote
Level: Senior Consultant / Associate Director

What you'll do

• Architect and own end-to-end SAP Basis and technical landscape design for S/4 HANA greenfield, brownfield programme implementations covering system sizing, landscape strategy, transport management, and infrastructure design

• Lead SAP Security architecture design defining role and authorisation frameworks, Segregation of Duties (SoD) governance, and access control strategies aligned to client risk and compliance requirements

• Design and govern SAP GRC (Governance, Risk & Compliance) solutions including Access Control, Process Control, and Risk Management ensuring audit-readiness and regulatory compliance across the programme

• Own technical architecture decisions for SAP HANA database administration, system performance tuning, high availability (HA), and disaster recovery (DR) design

• Lead system migration and upgrade planning S/4 HANA conversions, Unicode migrations, kernel upgrades, and support pack management coordinating with functional and integration workstream leads

• Define and govern SAP integration landscape security RFC connections, web services, API security, and secure connectivity between SAP and non-SAP systems

• Drive technical workshops with client IT and security teams, translating business risk requirements into technically sound SAP authorisation and basis architecture

• Manage and mentor a team of Basis and Security consultants across onshore and offshore delivery, ensuring quality and consistency of technical output

• Contribute to pre-sales and solutioning providing technical input to proposals, effort estimates, and client presentations for SAP transformation engagements

  What you'll bring

• 10- 14 years of SAP Basis and Security experience, with a clear track record as a technical architect on large-scale S/4 HANA implementations or migrations

• Deep expertise in SAP Basis administration and architecture; system landscapes, transport management (CTS/ChaRM), SAP HANA DB administration, performance optimisation, HA/DR design, and cloud infrastructure (AWS, Azure, or GCP hosted SAP landscapes)

• Strong command of SAP Security design: role design and build, authorisation concept development, SoD analysis and remediation, and Fiori security (catalogues, groups, launchpad configuration)

• Hands-on experience with SAP GRC Access Control including ARA, ARM, EAM, and BRM modules ideally with exposure to Process Control and Risk Management

• Experience with SAP RISE / BTP infrastructure and cloud-hosted SAP environments is a strong advantage

• Familiarity with regulatory and compliance frameworks relevant to SAP security: SOX, GDPR, ISO 27001 and the ability to translate these into practical authorisation governance

• Demonstrated ability to manage and mentor technical teams across onshore and offshore delivery models

• Strong stakeholder engagement skills. Comfortable working with client CISOs, IT Directors, and programme leadership on technical risk and architecture decisions

• SAP Certified Technology Associate in SAP HANA or SAP S/4 HANA System Administration preferred; CISSP, CISM, or equivalent security qualification is a plus

• In-depth understanding of:

End-to-end SAP Basis and technical landscape design

SAP integration landscape security

SAP HANA database administration: performance tuning, high

availability (HA), and disaster recovery (DR) design

Regulatory and compliance frameworks relevant to SAP security: SOX,

GDPR, ISO 2700

SAP RISE / BTP infrastructure and cloud-hosted SAP environments;

experience here is a strong advantage

What we offer

• Competitive salary + performance bonus tied to project and client outcomes
• Exposure to complex global S/4 HANA and Central Finance programmes across multiple industries
• A pivotal technical role with genuine architectural ownership and not ticket-based support but programme-shaping design leadership
• Close collaboration with functional and integration architects, with visibility at the highest levels of programme delivery
• Dedicated learning budget to stay current on SAP RISE, BTP, cloud security, and emerging SAP technical capabilities
• Flexible, remote working with a high-trust, outcomes-first culture