SAP Access Control Engineer

About This Opportunity

We are representing a confidential technology consulting organization seeking an experienced SAP Access Control Engineer to join their team on a fully remote basis. This is a direct-hire, full-time W2 position offering strong career growth potential within an established enterprise environment.

In this role, you will design, implement, and operate security and access-control frameworks across complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. You'll be responsible for SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites.

Responsibilities

• Design and implement security and access-control frameworks for enterprise SAP environments
• Manage SAP role design, user provisioning, and segregation-of-duties analysis
• Operate SAP GRC Access Control modules including ARA, ARM, BRM, and EAM
• Support SAP audits and lead remediation activities in collaboration with compliance teams
• Secure Fiori, BTP, and cloud SAP applications
• Partner with audit, compliance, and business stakeholders to maintain auditable SAP environments
• Work with SAP Process Control and continuous controls monitoring frameworks
• Document security configurations, procedures, and compliance artifacts

What We're Looking For

Required:

• Bachelor's degree in Computer Science, Engineering, or related technical discipline
• 6+ years of SAP Security and GRC experience in enterprise landscapes
• Strong hands-on experience with SAP authorization concepts and role design
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM)
• Proven track record supporting SAP audits and remediation activities
• Hands-on experience securing Fiori, BTP, and cloud SAP applications
• Familiarity with SAP IDM or third-party IGA tooling
• Working knowledge of SAP Process Control
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI
• Excellent communication and documentation skills
• U.S. work authorization (Citizens, Green Card holders, EAD holders, or H-1B transfer candidates; new H-1B sponsorship not available)

Preferred:

• SAP-certified Security or GRC credentials
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations
• Familiarity with HANA security and analytic privileges
• Experience with continuous controls monitoring frameworks
• Exposure to SAP RISE/Grow security operating models

How We Work With You

Our talent team at Get A Job.ai partners with leading organizations to connect top SAP professionals with exceptional opportunities. When you apply through our platform, a dedicated recruiter will review your background and conduct an initial screening. If there's a strong match, we will submit your profile to our client for consideration. Please do not contact the hiring organization directly—all communication flows through Get A Job.ai to ensure a professional, streamlined process.

Pay

Pay via Get A Job.ai: $128,000–$145,000 annually

Location: 100% Remote (United States)

Employment Type: Full-time, Direct W2

Get A Job.ai is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic.