SAP Access Control Engineer

Bright Vision Technologies; Oregon; Hybrid; USD 128,000 - 145,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks across SAP landscapes including S/4HANA, ECC, and Fiori.

This 100% remote U.S. role offers full-time direct W2 employment, with salary range $128,000 to $145,000 per year, and opportunities to collaborate with audit, compliance, and business teams to ensure a secure, auditable SAP environment.

Qualifications

• Bachelor's degree in CS, Engineering, or related field.
• 5+ years of SAP Security / GRC experience in enterprise landscapes.
• Hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Responsibilities

• Design, implement, and operate security and access-control frameworks for SAP landscapes.
• Design SAP roles and provision users with proper segregation of duties.
• Provide audit support and remediation for SAP environments.
• Operate SAP GRC suites (ARA, ARM, BRM, EAM) and monitor controls.
• Collaborate with audit, compliance, and business teams to deliver secure SAP environments.

Skills

SAP security

GRC Access Control

Role design

User provisioning

Audit support

SOX knowledge

Documentation

Education

Bachelor's degree in CS/Engineering

Tools

SAP GRC Access Control

SAP GRC Process Control

Fiori

BTP

SuccessFactors

SAP IDM

Job description

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: SAP Access Control Engineer

Location: 100% Remote (U.S.)

Position Type: Full-time, Direct W2

Salary Range: $128,000-$145,000 Annually

Experience Required: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

We are seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. In this role you will be responsible for SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites. The ideal candidate will combine deep expertise in SAP authorization concepts with strong hands-on experience operating SAP GRC Access Control and Process Control, and will partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Required Qualifications

• Bachelor's degree in Computer Science, Engineering, or a related technical discipline.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Preferred Qualifications

• SAP-certified Security or GRC credentials.
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations.
• Familiarity with HANA security and analytic privileges.
• Experience with continuous controls monitoring frameworks.
• Exposure to SAP RISE / Grow security operating models.

Learn more about Bright Vision Technologies atBright Vision Technologies is an Equal Opportunity EmployerEqual Employment Opportunity (EEO) StatementBright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.