Platform Engineer, SAP Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, engineer, manage, and continually enhance SAP security and access controls.

• Lead SAP security initiatives in support of S/4HANA transformation and modernization projects.

• Create scalable SAP security architecture suitable for multi-operating-company and multi-region settings.

• Oversee the redesign and rationalization of SAP roles, incorporating business-role architecture, composite/single roles, derived roles, organizational values, and authorization objects.

• Convert business process requirements into secure and appropriately segregated SAP access models.

• Assist with SAP cutover, migration, testing, UAT, and go-live security activities.

• Develop and optimize SAP roles based on principles of least privilege, business necessity, and risk-based access.

• Conduct role analysis, remediation, rationalization, and optimization across SAP environments.

• Establish role design standards, naming conventions, ownership models, and approval processes.

• Create controls for privileged and sensitive SAP access, including emergency/firefighter access.

• Integrate SAP access with enterprise IGA, SSO, MFA, PAM/PIM, and identity lifecycle processes.

• Configure, administer, and enhance SAP GRC Access Control capabilities.

• Perform SoD risk analysis and assist with access reviews and certification activities.

• Collaborate with SAP Basis and infrastructure teams on vulnerability management, security hardening, patching, and remediation.

• Work alongside Cybersecurity/SOC teams on SAP logging, monitoring, alerting, and security operations.

• Utilize SAP Joule and SAP Business AI to automate and streamline SAP security tasks.

• Collaborate with SAP and enterprise AI teams to ensure AI-enabled SAP functionalities adhere to security, privacy, authorization, and governance standards.

• Ensure SAP security controls comply with SOX, internal control, audit, regulatory, and corporate cybersecurity standards.

• Provide documentation and support for internal and external audits.

• Maintain security documentation, control procedures, risk assessments, and remediation strategies.

• Partner with SAP Basis, functional teams, IAM, Cybersecurity, Internal Audit, Compliance, and business stakeholders.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.

• Over 8 years of experience in SAP Security, with extensive hands-on experience in SAP S/4HANA.

• Strong expertise in designing and implementing SAP roles and authorization models.

• Proven experience with S/4HANA transformation, role redesign, and security modernization.

• Experience in a large, global, multi-operating-company environment.

• Demonstrated experience in implementing AI-based automation for operational efficiency.

• Strong analytical, problem-solving, and communication skills.

• Familiarity with SAP Joule, SAP Business AI, or AI-enabled SAP security and automation capabilities.

• Understanding of AI security, authorization, data protection, and governance considerations within SAP environments.

• Experience in SAP Fiori security and embedded analytics.

• Knowledge of SAP Cloud/BTP security and hybrid SAP environments.

• Experience with SAP Identity Management or integration with IGA platforms such as SailPoint.

• Experience in SAP license optimization.

• Experience supporting large-scale global SAP transformations.

• Knowledge of security architecture, Zero Trust principles, and risk-based access models.

🏝️ Benefits

• Highly competitive bonus program with the potential for overachievement based on performance and company results.

• Health insurance coverage.

• Wellness and family support programs.

• Life and disability insurance.

• Retirement savings plans.

• Paid leave programs.

• Educational assistance programs.

• Paid holidays and vacation time.

• Many benefits are subsidized or fully covered by the company.