SAP Access Control Engineer

Bright Vision Technologies; Austin (TX); Remote; USD 128,000 - 145,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for SAP landscapes including S/4HANA, ECC, and cloud SAP apps.

The role focuses on SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites, working with audit, compliance, and business teams to maintain a secure, auditable SAP environment.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or a related technical discipline.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Responsibilities

• Design, implement, and operate SAP access control frameworks across SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors).
• Perform SAP role design, user provisioning, and segregation-of-duties analysis.
• Support SAP audits and remediation activities with audit teams.
• Collaborate with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Skills

SAP Security

GRC

Role Design

Audit Support

Fiori Security

BTP Security

IGA tooling

Process Control

SOX/PCI/GxP

Documentation

Education

Bachelor's degree in Computer Science / Engineering

Tools

SAP IDM

IAS/IPS

SCIM integrations

Job description

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: SAP Access Control Engineer

Location: 100% Remote (U.S.)

Position Type: Full-time, Direct W2

Salary Range: $128,000–$145,000 Annually

Experience Required: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary

We are seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. In this role you will be responsible for SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites. The ideal candidate will combine deep expertise in SAP authorization concepts with strong hands-on experience operating SAP GRC Access Control and Process Control, and will partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Preferred Qualifications

• SAP-certified Security or GRC credentials.
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations.
• Familiarity with HANA security and analytic privileges.
• Experience with continuous controls monitoring frameworks.
• Exposure to SAP RISE / Grow security operating models.

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.