SAP IAG Technical Consultant

Location: Remote – Travel for workshops in the UK on an ad-hoc basis (1 day a month)

Contract Duration: 6 months

Day Rate: Competitive (Inside IR35)

Working with the Deloitte Associate (Contractor) Programme offers opportunities to work on various industry and client projects. Our goal is to retain top talent, and as your project end date approaches, our Talent Community Advisors will assist in finding new projects within Deloitte that match your experience, should you wish to continue.

The Role:

We are seeking an experienced SAP IAG Technical Consultant to lead and implement robust security solutions for SAP landscapes. The ideal candidate will have deep expertise in SAP Security and hands-on experience with SAP tools and methodologies for managing security and compliance across SAP environments. This role involves designing, implementing, and re-designing security roles to ensure secure and compliant systems for clients.

You will demonstrate and develop your skills in the following areas:

• Design and build roles, profiles, and authorizations for On-prem and cloud SAP systems (e.g., ECC, S/4HANA, BW) to enforce access controls.
• Configure and implement SAP Identity Access Governance (IAG) and Access Controls (AC) tools for auto provisioning and access risk management.
• Understand segregation of duties requirements and embed them into security role design.
• Collaborate with internal and client stakeholders, including technical teams, auditors, and business process teams, to ensure secure, integrated solutions.
• Prepare periodic status reports where applicable.
• Deliver documentation for security approaches, role design matrices, and user guides.
• Create training content and support knowledge transfer activities.
• Maintain a strong understanding of IT Controls for S/4HANA and other SAP applications.
• Deep knowledge of SAP authorization concepts, user roles, profiles, and best practices.
• Technical proficiency in SAP ECC, S/4HANA, SAP Fiori, SAP IAG, Access Controls, and cloud applications like SAP Analytics Cloud (SAC).
• Ability to analyze segregation of duties reports and remediate role risks.
• Assess risks, conduct root cause analysis, and implement best practice solutions for security challenges.
• Perform current state security assessments and recommend improvements.
• Resolve security issues efficiently with troubleshooting skills.
• Excellent communication skills to lead discussions, explain technical details, and collaborate with stakeholders.
• Work independently under tight deadlines in a client-facing environment while maintaining professionalism.
• Proficient in Microsoft Office Excel for analytics; Word and PowerPoint skills are a plus.
• Must hold UK Government Security Clearance.
• Education to degree level; additional certifications such as SAP Certified Technology Professional, SAP Access Control 12.0, CISSP, CISM, or similar are desirable.
• Meet UK Security clearance criteria.
• Strong understanding of Business Process Controls for S/4HANA and other SAP applications.
• Knowledge and application of regulatory requirements such as SoX, GDPR, etc.

IR35: To manage tax, commercial, and reputational risks, Deloitte prohibits the use of Associates through Personal Service Companies (‘PSCs’). All Associates must contract under PAYE arrangements through a Deloitte-approved ‘Employment Company’ (umbrella company).