SAP Access Control Engineer

About the Role

We are seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. In this role, you will be responsible for SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites. The ideal candidate will combine deep expertise in SAP authorization concepts with strong hands-on experience operating SAP GRC Access Control and Process Control, and will partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Responsibilities

• Design and implement SAP security and access-control frameworks
• Manage SAP role design and user provisioning
• Conduct segregation-of-duties analysis
• Support SAP audits and remediation activities
• Operate SAP GRC Access Control (ARA, ARM, BRM, EAM)
• Secure Fiori, BTP, and cloud SAP applications
• Collaborate with audit, compliance, and business teams

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline
• Five or more years of SAP Security / GRC experience in enterprise landscapes
• Strong hands-on experience with SAP authorization concepts and role design
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM)
• Experience supporting SAP audits and remediation activities
• Hands-on experience securing Fiori, BTP, and cloud SAP applications
• Familiarity with SAP IDM or third-party IGA tooling
• Working knowledge of SAP Process Control
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI
• Excellent communication and documentation skills

Preferred Qualifications

• SAP-certified Security or GRC credentials
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations
• Familiarity with HANA security and analytic privileges
• Experience with continuous controls monitoring frameworks
• Exposure to SAP RISE / Grow security operating models

Pay

Salary Range: $128,000–$145,000 Annually

Schedule

100% Remote (U.S.)

U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.