ESP Global Services
SAP Security Architect

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Brief Description
SAP Security Architect
Location: Manchester, United Kingdom
Employment Type: Full Time, Permanent
Secure the Future of Enterprise SAP
At ESP Global Services, we deliver mission-critical technology services to some of the world's most recognised organisations. As our customers continue to modernise their SAP estates, we are seeking an experienced SAP Security Architect to lead the design, governance and implementation of enterprise security solutions across complex SAP landscapes.
This is an opportunity to shape security strategy during large-scale SAP transformation programmes, including ECC to SAP S/4HANA migrations, while working alongside experienced enterprise architects, infrastructure specialists and business stakeholders.
If you enjoy solving complex security challenges, influencing enterprise architecture and delivering secure-by-design SAP environments, we'd like to hear from you.
The Role
As SAP Security Architect, you will own the security architecture for SAP platforms, ensuring security, compliance and governance are embedded throughout the solution lifecycle.
You will provide technical leadership across both existing SAP ECC environments and future SAP S/4HANA platforms, helping customers modernise their security model whilst maintaining business continuity and regulatory compliance.
Working closely with project teams, enterprise architects, infrastructure teams and business stakeholders, you will design scalable security frameworks that support both cloud and hybrid SAP environments.
Key Responsibilities
You Will Be Responsible For
- Designing enterprise SAP security architectures across SAP ECC, SAP S/4HANA and hybrid cloud environments.
- Developing and governing SAP authorisation strategies, role design and access management standards.
- Designing and maintaining Segregation of Duties (SoD) controls and governance frameworks.
- Configuring and governing SAP security roles across SAP ECC, SAP S/4HANA, SAP Fiori and SAP GRC.
- Integrating SAP environments with enterprise Identity and Access Management (IAM) platforms using Single Sign-On (SSO), SAML and related authentication technologies.
- Leading SAP security risk assessments, vulnerability analysis and remediation activities.
- Supporting audit readiness and ensuring compliance with regulatory and corporate security standards.
- Working with technical and business stakeholders to deliver secure solutions aligned to enterprise architecture.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
SAP ECC to SAP S/4HANA Migration Responsibilities
A significant aspect of this role is supporting enterprise transformation programmes.
You Will
- Design the security strategy for SAP ECC to SAP S/4HANA migrations.
- Redesign legacy SAP ECC roles into modern SAP S/4HANA and SAP Fiori authorisation models.
- Develop SAP HANA database security, user management and analytical privilege models.
- Lead the redesign of Segregation of Duties (SoD) rule sets during business process transformation.
- Integrate legacy and modern SAP platforms with enterprise IAM solutions.
- Conduct threat modelling and security assessments throughout the migration lifecycle.
- Ensure secure transition from traditional ABAP security models to modern SAP HANA and cloud security frameworks.
- Support programme governance, risk management and architecture decision making.
About You
We're looking for an experienced SAP Security professional who combines deep technical expertise with strong architecture and stakeholder management skills.
You Will Bring
- Minimum 10–12 years' experience in SAP Security.
- Proven experience delivering at least one full lifecycle SAP ECC to SAP S/4HANA migration.
- Strong experience designing enterprise SAP security architectures.
- Expert knowledge of SAP authorisations and role design.
- Advanced knowledge of SAP HANA database security.
- Strong experience with SAP GRC Access Control and Process Control.
- Experience implementing SAP Fiori security, catalogues, groups and OData services.
- Knowledge of SU24 authorisation object maintenance and custom transaction (Z-code) remediation.
- Experience integrating SAP with enterprise IAM solutions and Single Sign-On technologies.
- Strong understanding of security governance, audit and compliance frameworks including SOX and GDPR.
- Excellent communication skills with the ability to influence both technical and business stakeholders.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Experience
Experience with one or more of the following would be advantageous:
- SAP BTP security
- Cloud security architecture (Azure, AWS or Google Cloud)
- Microsoft Entra ID (Azure AD)
- Identity Governance and Administration (IGA) platforms
- Cyber security architecture
- Enterprise Architecture frameworks (TOGAF or equivalent)
- Security certifications such as CISSP, CISM or SAP Security certifications
Requirements
Why Join ESP Global Services?
ESP Global Services is a leading provider of IT managed services, delivering innovative technology solutions to customers across aviation, retail, pharmaceuticals, logistics, financial services and other global industries.
You'll join an organisation where innovation, collaboration and customer success are at the heart of everything we do.
We Offer
- Competitive salary and benefits package.
- Opportunities to work on large-scale global transformation programmes.
- Exposure to enterprise cloud and digital transformation initiatives.
- Professional development and certification support.
- A collaborative and supportive international team.
- Career progression within a growing global technology business.
Ready to Apply?
If you're passionate about SAP Security Architecture and want to help deliver secure enterprise transformation programmes for global organisations, we'd love to hear from you.
Apply today and help shape the future of secure SAP environments at ESP Global Services.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills