To better answer your specific question, I spoke with a couple of SAP staffing experts as well as a Security consultant, and they all confirmed what I mentioned here: SAP Security is still a viable niche for consultants who have focused Security expertise on multiple projects. Since you have this skills profile, one way to build on that expertise is to explore new contracting opportunities in SAP Security. The best way to find out if you if have a marketable contracting niche is simple: put your resume out there, as discretely as possible, and see what kind of offers you can generate. The offers you get (or don't get) will give you a good sense of what's out there for you. Keep in mind that this is a tough market to contract in, so you may decide to ride out your current position and test the waters again when the market improves.
Of course, SAP Security contracting is not your only career option. You seem to be approaching a fork in the road: one fork leads into increased levels of project management, and likely has you staying with your current firm and taking on more responsibilities. Another fork leads you away from your current job and into a hands-on contracting niche in SAP Security, taking on the responsibilities of managing an independent contracting career. Both are potentially viable career paths - your ultimate decision should be based primarily on the career path that you find most compelling. But keep in mind, in order to land an SAP Security contract, you'll need to put together a resume that downplays your management responsibilities and emphasizes your hands-on Security expertise. Keep in mind that if you have moved away from hands-on skills on recent projects, you'll have a hard time landing a contract, and that particular career track will not be open to you until you update your hands-on skills with the latest Security know-how.
This was first published in April 2003