• Created policies and procedures for SAP security.
• Implemented current security policies and guidelines
• Assigned roles and profiles
• Maintained transaction selections and authorizations data in roles
• Supported and maintained user account information including rights, security and groups.
• Created, maintained password changes, locked and unlocked users within SAP R/3 ECC environment.
• Extended security roles and profiles for current template and facilitate future implementations/roll-outs.
• Application design and implementation of Roles.
• Performed administration and maintenance in CUA Install software releases, system upgrades, evaluate and install patches and resolves software related problems.
• Identified, researched, and resolved technical problems.
• Solid knowledge of creating single, composite, master and derived roles using the Profile Generator (PFCG)
• Security Audit, SOX and Segregation of duties(SoD).
• Automating and managing Risk through Governance Risk and Compliance / Access Enforcer (Risk analysis and remediation)
• Designed SAP security roles with GRC suite: Fire fighter, Compliance Calibrator and Role expert
• Provided technical & functional expertise to 25,000+ users.

• 2000 & 2003 Advanced Sever, ISA Server, Citrix Presentation Metaframe XP/4.0, MySQL, Clarify, Remedy, VNC Enterprise Edition, Microsoft Access, Norton Enterprise Edition, SAP R/3 4.7, SAP ECC 6.0 (FICO, MM, SD, CRM, HR, SCM, BI) SAP Enterprise Portal 7.0

Confidential
SAP Security Consultant March 2010 – Dec 2011

• Identifying potential SOD issues before assigning new roles to the users.
• Checking firefighter ID logs daily.
• Analyze user problems by using SU53, SUIM
• Creating new user accounts and user groups
• Creating and assigning roles to users
• Restrict table access through authorization groups
• Password resets and reactivation of users
• Mass user Maintenance

Confidential
SAP Security Consultant Nov. 07 – Jan 2010

• Part of a team that provided security development and support for users in production environment which comprises of SAP R/3 (FI/CO, MM,HR and BI 7.0). The areas of support included maintaining and extending security roles and profiles for current template and facilitate future implementations/roll-outs.
• Provided end-user production and project support. Incorporated segregation of duties with respect to application security implementations.
• Promoted the design process methodology used within the organization. Developed and maintained existing security roles and profiles. Actively contributed to the team’s goal by providing thought leadership in the areas of strategy and resolving security issues.
• Responsible for contributing to the SAP Security Administration team meeting target SLA's, Audit Compliance, and management defined performance metrics. Reviewed SOD and carried out necessary corrective actions.
• Served as the link between the various business units and the security team in assigning appropriate roles per Segregation of duties (SOD).
• Responsible for updating policies and procedures like the Line of Business Coordinators list for the security team. Used SUIM to troubleshoot and perform daily user information management. Prepared all local daily, weekly and monthly reports on a timely basis for SOX Controls. Used Access Enforcer (GRC) to create and modify roles.

Confidential
SAP Security Consultant Jan. 07– Aug. 07

• Provided technical security related activities in various environments (FI, CO, HR, SCM, BI) including system administration, system monitoring, database administration tasks through sap dba.
• Knowledge of solutions manger to hold project data or documentation and served as a gateway to SAP services.
• Resolved transaction issues with SU53 printouts.
• Created single, composite and derived roles in Development system (PFCG).
• Used various SE16 tables and Tcodes SUIM in performing daily functions.
• Transported tested roles to Production system with SE09/SE10 and STMS Performed daily user maintenance, such as creating/deleting users, assigning roles to users, locking/unlocking users, and changing passwords by using SU01.Use of SM19 and SM20 in security Audits.

ADM 100 Web AS Administration I
ADM 940 SAP Authorization Concept

Masters in Information Security & Assurance t
Bachelors in Computer Engineering

• References available upon request.