About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior SAP Security & GRC Engineer based in United States.
Responsibilities
- Design, implement, and maintain SAP authorization concepts and role structures aligned with business processes, security policies, and least-privilege principles.
- Build and manage master, derived, composite, and business roles across S/4HANA, ECC, and Fiori environments.
- Configure and operate SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
- Manage GRC rulesets, mitigating controls, emergency access processes, and access governance workflows.
- Perform segregation-of-duties analysis and coordinate remediation activities with business process owners, compliance teams, and internal audit.
- Configure user provisioning workflows in SAP GRC ARM, including request types, approval paths, and integrations with IAM/IGA platforms.
- Operate SAP GRC Process Control to support continuous controls monitoring and policy management.
- Implement and maintain security configurations for SAP Fiori applications, including catalogs, groups, and front-end authorizations.
- Configure and operate security for SAP BTP and cloud applications using technologies such as XSUAA, IAS, and IPS.
- Support SOX, GxP, PCI, and other SAP security audits, including evidence collection, finding remediation, and maintenance of documented remediation plans.
- Implement transport security, table logging, audit logging, and other controls in accordance with enterprise security policies.
- Monitor SAP Security Notes and coordinate remediation with Basis, DBA, and other technical teams.
- Maintain comprehensive technical documentation, including architecture diagrams, configuration references, design decisions, runbooks, and operational procedures.
- Mentor junior security professionals and facilitate knowledge transfer to strengthen the broader SAP security capability.
Requirements
- Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
- 5+ years of hands-on SAP Security and GRC experience within complex enterprise SAP environments; the position indicates 10+ years of overall experience as preferred.
- Deep knowledge of SAP authorization concepts, security architecture, and enterprise role design.
- Strong hands-on experience with SAP GRC Access Control, particularly ARA, ARM, BRM, and EAM.
- Demonstrated experience conducting segregation-of-duties analysis, managing mitigating controls, and resolving access risks.
- Experience supporting SAP audits and developing or executing remediation plans.
- Hands-on experience securing SAP Fiori, SAP BTP, and cloud-based SAP applications.
- Familiarity with SAP IDM and/or third-party identity governance and administration platforms.
- Working knowledge of SAP GRC Process Control and continuous controls monitoring.
- Strong understanding of regulatory and compliance frameworks, including SOX, GxP, and PCI.
- Excellent analytical, communication, documentation, and stakeholder-management skills.
- Ability to work independently in a remote environment while collaborating effectively with technical, business, audit, and compliance stakeholders.
- U.S. work authorization is required; U.S. Citizens, Green Card Holders, EAD Holders, and candidates eligible for H-1B transfer are encouraged to apply. New H-1B visa sponsorship is not available.
Conditions
- Salary: $100,000–$150,000 annually, depending on experience and qualifications.
- Work arrangement: 100% remote within the United States.
- Employment type: Full-time, direct W2 position.
- Opportunity to work on complex enterprise SAP security and governance environments.
- Exposure to S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors, and modern IAM technologies.
- Career growth opportunities within an established technology consulting and software development environment.
- Opportunity to mentor team members and expand technical leadership experience.
- Collaborative work with SAP, security, audit, compliance, business, and infrastructure professionals.
- Equal employment opportunity environment committed to fair and inclusive employment practices.