Solutions-oriented IT Security Specialist with notable success directing a broad range of corporate IT initiatives while participating in planning and implementation of information-security solutions in direct support of business objectives.
Having around 5.2 years of Strong Expertise in SAP Security and Authorization area, having experience in GRC (ARA, ARM&EAM), FIORI Security and HANA Admin.
SAP S4 HANA / Fiori Security :
. Day to day technical support and resolution of security issues.
· Extensive experience with resolving ticket issues and troubleshooting security authorization problems while adhering to service level agreement (SLA).
· User administration which includes user creation/deletion, lock/unlock and assigning roles by using SU01
· Mass user creation and Role assignment using SU10
· Creation of Roles (single, composite, derived), Maintenance of authorization data, Generation of profiles using PFCG, creating transport requests using SE01 for roles and assignment of roles to users.
· Analyzing and solving the missing authorizations issues raised by the Business users & support them using SUIM, SU53 & Tracing missing authorizations issues.
· Maintaining Authorization check proposals using transaction SU24.
· Working with tables like AGR*, USR* etc.
· Extracting reports through SUIM as user/role/profile, change document for user/roles.
· Providing FFID to the users and reviewing the log reports for FFID access.
· Creation of Fiori Catalog/ Group via FLP (designer)- and FLPCM both.
· Addition / Delete of new Fiori apps from existing Catalog’s
Troubleshooting of Fiori Security issues, IWFND/ERROR_LOG·
GRC AC:
· Activation of BC Sets for Workflow, ARA, EAM, ARM & BRM.
· Maintaining EAM Parameters and ensuring that it is FF ID based.
· EAM administration - Creating fire fighter IDs and assigning owner and controller to the fire-fighter ids.
· Configured and Implemented GRC Access Control Suite
· Worked on GRC AC Components ARA, EAM and ARM.
· Under ARA, performed User & Role analysis to identify existing SOD violations risk.
· Execution and Simulation of risk analysis at user level and Role Level against Rule Set.
· Maintaining Rule Set, Function ID & Risk ID with Risk Owners and Generating rules.
· Creation and maintenance of Mitigation controls.
· Configuration of Password Self Service.
· Performed mitigation against various risks associated with roles and users.
· Configuration of MSMP workflows with BRF+ Application.
ECC 6.0 Activities
· Resolving missing authorization issues by using SU53, ST01 and SUIM.
· Worked on Authorization groups using SE54.
· Authorization checks using transaction SU24 and maintained check indicators for T-codes.