Shafiuddin Syed

Twenty years deciding who gets access to what across global SAP landscapes, and proving it to the auditors.

SAP architecture, access governance, Azure cloud, automation, and CMMC and SOX compliance.

Get in touch See the projects
Segregation of duties check
0 conflicts

Every duty has one owner.

Click any square to grant or revoke. Sample roles, not a client system.
Years of experience
20+
Provisioning time saved
90%
SOX violations reduced
35%
Redwood jobs governed
1,000+

Building security programs that actually reduce risk

I've spent more than 20 years designing, securing, and modernizing enterprise SAP and non-SAP ecosystems. In my current role, I serve as the architect of record across SAP Basis & Infrastructure, SAP Security & GRC, Enterprise Job Scheduling, and non-SAP application security, owning SOX audit relationships, CMMC compliance initiatives, and organization-wide data privacy governance.

Recent programs I've led include a full SAP server migration to Microsoft Azure cloud, end-to-end SAP ECC production DR testing, a Vertex O-Series SR17 to SR20 tax engine upgrade, Leena AI integration with SAP SuccessFactors, CMMC-compliant role design for Microsoft Dynamics 365 CE & F&O, and building a UAR Governance & Compliance application from the ground up using Python, FastAPI, Streamlit, and pyrfc. I lead teams, own audit relationships, and build tools that make security operations measurably better.

Based in the New York / New Jersey area.

Access governance
SAP GRC, RBAC, SoD, PAM, IGA, UAR
Compliance and audit
SOX, CMMC Level 2, FDA, Data Privacy Steward
SAP architecture and cloud
Azure Migration, SAP Basis, S/4HANA, BTP, HANA
Automation and development
Python, FastAPI, Streamlit, pyrfc, AppSheet, VBA

Core expertise

20 years across SAP security, identity governance, cloud infrastructure, and enterprise automation.

Security and access governance

  • SAP GRC Access Control 10.1/12.0
  • SoD Governance
  • SOX Compliance
  • Identity & Access Management
  • CMMC Level 2
  • Least-Privilege Design
  • Audit Liaison
  • Data Privacy (PIA)
  • UAR Governance
  • Emergency Access Management

SAP and cloud platforms

  • SAP S/4HANA
  • SAP ECC
  • SAP BTP
  • SAP SuccessFactors
  • SAP Analytics Cloud
  • SAP Master Data Governance
  • Microsoft Azure
  • Dynamics 365 CE & F&O
  • SAP Fiori
  • Vertex O-Series
  • Leena AI

Automation and development

  • Python 3.12
  • FastAPI
  • Streamlit
  • Jinja2
  • pyrfc
  • Excel VBA
  • Google AppSheet
  • ABAP
  • Power Automate

Infrastructure and operations

  • SAP Basis Administration
  • SAP HANA & Oracle DB
  • Azure Cloud Migration
  • Redwood Job Scheduling
  • Disaster Recovery Testing
  • Kerberos SSO
  • SAP Enterprise Portal
  • DR Testing (RTO/RPO)

Experience and key milestones

20+ years of progressive SAP and enterprise IT leadership across security, infrastructure, and cloud.

Sr. Manager, Global Operations

Active Started 2014 Ended Present 12 years

SAP Basis & Architecture, SAP Security & GRC, Enterprise Job Scheduling, Non-SAP Application Security

  • 35% SOX violations reduced
  • 90% provisioning time saved
  • 100% Azure cloud migration

Job log

  1. Architected full SAP server migration to Microsoft Azure cloud: ECC, GRC, PPM, and Enterprise Portal
  2. Upgraded SAP GRC 10.1 to 12.0 on HANA with simultaneous Oracle-to-HANA DB migration
  3. Led end-to-end production DR testing validating RTO/RPO across the full SAP landscape
  4. Upgraded Vertex O-Series Tax Engine SR17 to SR20, resolving a critical enterprise tax reporting issue
  5. Designed and implemented CMMC Level 2 role permissions for Dynamics 365 CE & F&O
  6. Built UAR Governance & Compliance app using Python 3.12, FastAPI, Jinja2, Streamlit & pyrfc
  7. Implemented Leena AI integration with SAP SuccessFactors
  8. Reduced SOX violations by 35% through RBAC role redesign; cut provisioning time by 90% via automation
  9. Govern 1,000+ Redwood job scheduling landscape migrated to Azure cloud infrastructure
  • SAP Basis
  • GRC 12.0
  • Azure
  • CMMC
  • SOX
  • Python
  • Redwood

Sr. SAP Basis & Security Consultant

Finished Started 2005 Ended 2014 9 years

SAP Basis Administration, Security Architecture, GRC & SoD, Multi-industry Client Delivery

  • 50% SoD violations reduced
  • Clean external audit compliance across all clients

Job log

  1. Led full end-to-end SAP ECC6 security implementations across pharmaceutical, manufacturing, and technology clients
  2. Redesigned SoD rulesets achieving 50% reduction in violations and clean external audit compliance
  3. Implemented SOX and FDA-mandated security controls across multiple regulated environments
  4. Executed SAP GRC upgrades, OS migrations, and production DR testing for enterprise clients
  5. Delivered SAP ECC, CRM, SRM, and Solution Manager installations for multi-client landscapes
  • SAP ECC
  • GRC
  • SoD
  • SOX
  • FDA
  • Basis Admin
  • Redwood CPS

Bachelor of Technology, Computer Science & Engineering

Finished Education

Jawaharlal Nehru Technological University

Projects

Enterprise tools and side projects, from SAP automation to AI-powered trivia games.

Featured

UAR Governance & Compliance Application

Replaced manual spreadsheet UAR process. Full audit trail.

Designed and developed a full-stack User Access Review (UAR) governance platform replacing fragmented spreadsheet and email-based compliance processes with a fully auditable, governed workflow. Built with Python 3.12, FastAPI, Jinja2, Streamlit, and pyrfc for live SAP RFC integration, enabling real-time role reviews, approval chains, and audit-ready reporting.

  • Python 3.12
  • FastAPI
  • Jinja2
  • Streamlit
  • pyrfc
  • SAP RFC
  • Governance
  • Audit

Featured

SAP User Provisioning Automation

90% less provisioning turnaround time.

Streamlit web application using Python and pyrfc for SAP RFC connectivity to fully automate SAP user provisioning workflows, replacing a manual SU01-based process and reducing turnaround time by up to 90%. Supports bulk provisioning, role assignment, and real-time status tracking through a clean browser interface.

  • Python
  • Streamlit
  • pyrfc
  • SAP RFC
  • Automation
  • SU01

Data Privacy Review Automation

Replaced manual PIA process. Governed and trackable.

Built a Google AppSheet workflow application to automate Data Privacy Impact Assessment (PIA) review processes for the Project Management organization, replacing a manual spreadsheet process with a governed, trackable, and auditable solution.

  • Google AppSheet
  • Google Workspace
  • Data Privacy
  • Automation

Jeopardy Unleashed

AI-generated questions. Every board is unique.

A free, PWA-installable Jeopardy-style multiplayer trivia game built with HTML, CSS, and JavaScript. Questions are generated in real time by Llama 3.3 70B via the Groq API through a Cloudflare Worker proxy. No static question banks, every board is unique.

  • HTML
  • CSS
  • JavaScript
  • Groq API
  • Llama 3.3 70B
  • Cloudflare Worker
  • PWA
Play the live demo

Iqama Times

Live countdown to the next iqama. Installs as an app.

A prayer times app for the Islamic Society of Central Jersey. A 24-hour dial counts down to the next adhan and iqama, iqama times refresh daily from the masjid’s site or can be set by each user, and it installs to a phone and works offline.

  • HTML
  • CSS
  • JavaScript
  • PWA
  • GitHub Actions
  • PrayTimes.js
Open the app

Let’s connect

Have a question about SAP architecture, enterprise security, access governance, compliance, or just want to connect? Fill out the form and I’ll get back to you.

Location
New York / New Jersey Area
Response time
Usually within 24 hours
Message sent. I’ll get back to you within 24 hours.

* Required fields. Your details are used only to reply to you.