TL;DR
SAP Security Engineer (GRC & S/4HANA): Implementing and maintaining security across SAP ERP, CRM, ISU, and Fiori platforms, ensuring compliance with SOX and utility-specific regulations like NERC/CIP with an accent on role administration, authorization concepts, and audit readiness. Focus on leading GRC Access Control activities, troubleshooting authorization issues, and supporting S/4HANA security architecture.
Location: Detroit, MI – Local – In office (Tue, Wed, Thu)
Company
hirify.global is seeking an SAP Security Engineer to support and secure SAP environments for utility operations.
What you will do
- Provide user and role administration across multiple SAP ERP and CRM modules, including IS-U and Fiori.
- Lead SAP GRC Access Control activities including role design, SoD analysis, mitigation controls, and audit support.
- Design, build, and maintain SAP security roles in S/4HANA using PFCG, SU24, and Fiori.
- Partner with business and IT stakeholders to translate process requirements into compliant security designs.
- Troubleshoot and fix production security authorization issues and access conflicts.
- Support SAP upgrade and system refresh activities and monitor security performance and compliance.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Business, or a related field.
- Minimum 3 years of experience with SAP ERP and CRM security authorization concepts, including IS-U.
- Strong understanding of SAP role design, authorization concepts, and SoD conflict resolution.
- Experience working in complex SAP environments with multiple clients and landscapes.
- Hands-on experience with Fiori security design and configuration.
- NERC Background check will be required.
- Assignment: 12 months, then eligible for contract renewal.
Nice to have
- Experience with SAP GRC Access Control or Identity and Access Governance (IAG).
- Knowledge of SAP ISU/CRM and S/4HANA security models.
- Exposure to SAP HANA database security and user provisioning.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →