SAP DevSecOps Lead Engineer (SAP)

Location: Remote

Salary: $135,000–$160,000 annually, plus eligibility for an annual bonus.

Company

hirify.global supplies building materials, value-added components, and building services to the professional home-building market.

What you will do

• Design, build, harden, and operate secure SAP environments across S/4HANA, BTP, SAC, MDG, IBP, BWZ, Solution Manager, SAP RISE, and connected applications.
• Engineer SAP roles, authorizations, least-privilege controls, segregation-of-duties remediation, Fiori access, and emergency access processes.
• Embed security-by-design controls into SAP development, transport, release, CI/CD, testing, and deployment processes.
• Integrate SAP access and security capabilities with SAP GRC, SAP IAG, Microsoft Entra ID, PAM, SIEM, and enterprise IAM platforms.
• Operate vulnerability management, monitoring, alerting, remediation, audit evidence, and security reporting across SAP and cloud environments.
• Provide technical leadership and coordinate with SAP, architecture, infrastructure, cybersecurity, audit, business, and managed service teams.

Requirements

• Bachelor’s degree or an equivalent combination of education, experience, and certifications.
• 5+ years of relevant experience in SAP Security, SAP GRC, cybersecurity, IAM, security architecture, or SAP platform delivery.
• Experience supporting a large SAP transformation or implementation, preferably involving S/4HANA and SAP cloud services.
• Knowledge of SAP authorization concepts, role design, organizational restrictions, segregation of duties, emergency access, and privileged access.
• Working knowledge of SAP change, transport, release, testing, production support, and Microsoft Power BI.
• Ability to translate technical security risks into business impacts, decisions, and actions for executive and program leadership.

Nice to have

• Experience with SAP RISE, BTP, CPGRC Access Provisioning, SAP IAG, Fiori, SAC, MDG, IBP, BW/BWZ, and Solution Manager.
• Experience with SecurityBridge, Onapsis, SAP Code Vulnerability Analyzer, or similar SAP security tools.
• Experience integrating SAP with Microsoft Entra ID, enterprise IAM, PAM, SIEM, vulnerability management, and CI/CD toolchains.
• CISSP, CISM, CCSP, SAP security, cloud security, or DevSecOps certifications.

Culture & Benefits

• Collaborative, inclusive, and people-focused work environment.
• Training, professional development, and access to current tools and technologies.
• Medical, dental, vision, and disability insurance.
• 401(k) retirement savings plan, paid time off including sick time, and eight paid holidays.
• Typical office environment with occasional outside locations, occasional travel, and lifting up to 25 pounds.