SAP Access Control Engineer

Bright Vision Technologies; Chesterfield (MO); Remote; USD 128,000 - 145,000; Full time

Job summary

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States. This is a remote opportunity for a seasoned SAP Access Control Engineer to design, implement, and operate security frameworks across SAP landscapes, ensuring role design, user provisioning, and audit support are managed effectively.

The ideal candidate has 6+ years of SAP Security/GRC experience, hands-on GRC operations

Qualifications

• Bachelor’s degree in CS, engineering, or related field.
• 5+ years of SAP Security/GRC in enterprise landscapes.
• Hands-on experience with SAP authorization concepts and role design.
• Experience securing Fiori, BTP, and cloud SAP applications.

Responsibilities

• Design, implement, and operate security and access-control frameworks for SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors).
• Design SAP roles, provice user provisioning, perform SoD analysis, support audits.
• Operate SAP GRC Access Control and Process Control systems.
• Partner with audit, compliance, and business teams to maintain a secure, auditable SAP environment.

Skills

SAP authorization concepts

Role design

GRC Access Control (ARA, ARM, BRM, EAM

Audit support

Fiori security

BTP security

Cloud SAP security

SAP IDM / IGA tooling

Process Control

SOX/GxP/PCI compliance

Communication & documentation

Education

Bachelor’s degree in Computer Science, Engineering, or a related technical discipline

Job description

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: SAP Access Control Engineer

Location:100% Remote (U.S.)

Position Type:Full-time, Direct W2

Salary Range:$128,000–$145,000 Annually

Experience Required:6+ years

Sponsorship:U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary

We are seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. In this role you will be responsible for SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites. The ideal candidate will combine deep expertise in SAP authorization concepts with strong hands-on experience operating SAP GRC Access Control and Process Control, and will partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Preferred Qualifications

• SAP-certified Security or GRC credentials.
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations.
• Familiarity with HANA security and analytic privileges.
• Experience with continuous controls monitoring frameworks.
• Exposure to SAP RISE / Grow security operating models.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.