SAP Access Control Engineer

About This Opportunity

We are representing a confidential technology consulting client seeking an SAP Access Control Engineer to join their team on a fully remote basis anywhere in the United States. This is a direct-hire, full-time W2 position offering strong career advancement within an established organization.

Our client operates complex SAP landscapes spanning S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. You will own the design, implementation, and day-to-day operation of security and access-control frameworks, ensuring compliance with SOX, GxP, and PCI requirements while partnering with audit, compliance, and business stakeholders.

Responsibilities

• Design and maintain SAP authorization objects, roles, and profiles across enterprise SAP environments
• Operate SAP GRC Access Control modules including ARA, ARM, BRM, and EAM
• Perform segregation-of-duties analysis and risk remediation activities
• Support internal and external audit requests; document controls and evidence
• Secure Fiori, BTP, and cloud SAP applications using role-based and attribute-based access models
• Administer user provisioning workflows and integrate with SAP IDM or third-party IGA platforms
• Maintain SAP Process Control configurations and continuous monitoring frameworks
• Document security standards, runbooks, and change procedures

What We're Looking For

Required:

• Bachelor's degree in Computer Science, Engineering, or related technical field
• 5+ years of SAP Security and GRC experience in enterprise environments
• Deep hands-on expertise with SAP authorization concepts and role design
• Proven experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM)
• Track record supporting SAP audits and compliance remediation
• Experience securing Fiori, BTP, and cloud SAP applications
• Familiarity with SAP IDM or third-party identity governance and administration tools
• Working knowledge of SAP Process Control
• Understanding of SOX, GxP, and PCI regulatory frameworks
• Excellent written and verbal communication skills

Preferred:

• SAP certification in Security or GRC disciplines
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM integrations
• Knowledge of HANA security and analytic privileges
• Exposure to continuous controls monitoring and automation
• Familiarity with RISE or Grow security operating models

Visa note: U.S. Citizens, Green Card holders, EAD holders, and H-1B transfer candidates are encouraged to apply. Our client cannot sponsor new H-1B petitions for this role.

How We Work With You

When you apply through Get A Job.ai, one of our experienced recruiters will review your profile and conduct an initial screening call to understand your background, technical skills, and career goals. If there is a strong mutual fit, we will prepare and submit your candidacy to our client for consideration. You will be guided through each stage of the interview process by our talent team.

Please do not contact the employer directly. All inquiries and applications must come through Get A Job.ai to ensure proper representation and coordination.

Pay

Pay via Get A Job.ai: $128,000–$145,000 annually, based on experience and qualifications.

Equal Opportunity: Get A Job.ai is committed to equal employment opportunity for all applicants regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.