SAP Access Control Engineer

Accountabilities

• Manage enterprise SAP security solutions, ensuring appropriate access controls, compliance alignment, and reliable security operations across SAP platforms.
• Design, implement, and maintain SAP authorization concepts, role structures, and access models based on business requirements and least-privilege principles.
• Build and manage SAP roles including master, derived, composite, and business roles across S/4HANA, ECC, and Fiori environments.
• Configure and operate SAP GRC Access Control solutions, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
• Perform segregation-of-duties analysis, identify access risks, and support remediation efforts with business process owners and audit teams.
• Manage SAP user provisioning workflows, approval processes, and integrations with identity management platforms.
• Support SAP GRC Process Control activities, continuous controls monitoring, and policy compliance initiatives.
• Implement and maintain security configurations for SAP Fiori, SAP BTP, and cloud-based SAP applications.
• Support compliance audits including SOX, GxP, and PCI requirements by providing documentation, analysis, and remediation support.
• Maintain detailed technical documentation including security designs, configurations, procedures, and operational guidelines.
• Mentor junior team members and contribute to security best practices and knowledge-sharing initiatives.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related technical discipline.
• Five or more years of professional experience in SAP Security and SAP GRC within enterprise environments.
• Strong knowledge of SAP authorization concepts, role design, and access governance methodologies.
• Hands-on experience with SAP GRC Access Control modules including ARA, ARM, BRM, and EAM.
• Experience supporting SAP audits, compliance reviews, and remediation activities.
• Experience securing SAP Fiori applications, SAP BTP environments, and cloud-based SAP solutions.
• Familiarity with SAP Identity Management or third-party identity governance and administration tools.
• Working knowledge of SAP GRC Process Control and continuous compliance monitoring.
• Understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Strong analytical, troubleshooting, documentation, and communication skills.

Benefits

• Competitive annual salary range of $100,000-$150,000.
• Full-time direct employment opportunity.
• Opportunity to work on complex enterprise SAP security environments.
• Career growth potential within cloud, enterprise technology, and cybersecurity domains.
• Exposure to modern SAP platforms including S/4HANA, BTP, Fiori, and identity management solutions.
• Collaborative environment focused on innovation, technical excellence, and professional development.