Senior SAP Security & GRC Engineer

Accountabilities:

• • Design, implement, and maintain SAP authorization concepts and role structures aligned with business processes, security policies, and least-privilege principles.
  • Build and manage master, derived, composite, and business roles across S/4HANA, ECC, and Fiori environments.
  • Configure and operate SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
  • Manage GRC rulesets, mitigating controls, emergency access processes, and access governance workflows.
  • Perform segregation-of-duties analysis and coordinate remediation activities with business process owners, compliance teams, and internal audit.
  • Configure user provisioning workflows in SAP GRC ARM, including request types, approval paths, and integrations with IAM/IGA platforms.
  • Operate SAP GRC Process Control to support continuous controls monitoring and policy management.
  • Implement and maintain security configurations for SAP Fiori applications, including catalogs, groups, and front-end authorizations.
  • Configure and operate security for SAP BTP and cloud applications using technologies such as XSUAA, IAS, and IPS.
  • Support SOX, GxP, PCI, and other SAP security audits, including evidence collection, finding remediation, and maintenance of documented remediation plans.
  • Implement transport security, table logging, audit logging, and other controls in accordance with enterprise security policies.
  • Monitor SAP Security Notes and coordinate remediation with Basis, DBA, and other technical teams.
  • Maintain comprehensive technical documentation, including architecture diagrams, configuration references, design decisions, runbooks, and operational procedures.
  • Mentor junior security professionals and facilitate knowledge transfer to strengthen the broader SAP security capability.

  Requirements:

  • Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
  • 5+ years of hands-on SAP Security and GRC experience within complex enterprise SAP environments; the position indicates 10+ years of overall experience as preferred.
  • Deep knowledge of SAP authorization concepts, security architecture, and enterprise role design.
  • Strong hands-on experience with SAP GRC Access Control, particularly ARA, ARM, BRM, and EAM.
  • Demonstrated experience conducting segregation-of-duties analysis, managing mitigating controls, and resolving access risks.
  • Experience supporting SAP audits and developing or executing remediation plans.
  • Hands-on experience securing SAP Fiori, SAP BTP, and cloud-based SAP applications.
  • Familiarity with SAP IDM and/or third-party identity governance and administration platforms.
  • Working knowledge of SAP GRC Process Control and continuous controls monitoring.
  • Strong understanding of regulatory and compliance frameworks, including SOX, GxP, and PCI.
  • Excellent analytical, communication, documentation, and stakeholder-management skills.
  • Ability to work independently in a remote environment while collaborating effectively with technical, business, audit, and compliance stakeholders.
  • U.S. work authorization is required; U.S. Citizens, Green Card Holders, EAD Holders, and candidates eligible for H-1B transfer are encouraged to apply. New H-1B visa sponsorship is not available.

  Benefits:

  • Salary: $100,000–$150,000 annually, depending on experience and qualifications.
  • Work arrangement: 100% remote within the United States.
  • Employment type: Full-time, direct W2 position.
  • Opportunity to work on complex enterprise SAP security and governance environments.
  • Exposure to S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors, and modern IAM technologies.
  • Career growth opportunities within an established technology consulting and software development environment.
  • Opportunity to mentor team members and expand technical leadership experience.
  • Collaborative work with SAP, security, audit, compliance, business, and infrastructure professionals.
  • Equal employment opportunity environment committed to fair and inclusive employment practices.