SAP Access Control Engineer

Bright Vision Technologies; United States; Remote; USD 128,000 - 145,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors.

The ideal candidate will have deep expertise in SAP authorization concepts and hands-on SAP GRC Access Control (ARA, ARM, BRM, EAM) with experience supporting audits and remediation activities. This is a 100% remote United States role.

Qualifications

• Bachelor's degree in a technical discipline.
• 6+ years SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on SAP authorization concepts and role design.

Responsibilities

• Design, implement, and operate security and access-control frameworks for complex SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori).
• Lead SAP GRC Access Control operations (ARA/ARM/BRM/EAM) and support audits.
• Collaborate with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Skills

SAP Security / GRC

SAP authorization concepts

Role design

Audit support

Fiori/BTP security

IGA tooling familiarity

SOX/GxP/PCI knowledge

Communication & documentation

Education

Bachelor's degree in Computer Science, Engineering, or a related technical discipline

Tools

SAP GRC Access Control (ARA/ARM/BRM/EAM)

Job description

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title:

SAP Access Control Engineer

Location:

100% Remote (U.S.)

Position Type:

Full-time, Direct W2

Salary Range:

$128,000–$145,000 Annually

Experience Required:

6+ years

Sponsorship:

U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary:

We are seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. In this role you will be responsible for SAP role design, user provisioning, segregation of duties analysis, audit support, and the technical operation of SAP GRC suites. The ideal candidate will combine deep expertise in SAP authorization concepts with strong hands-on experience operating SAP GRC Access Control and Process Control, and will partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Required Qualifications:

• Bachelor's degree in Computer Science, Engineering, or a related technical discipline.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Preferred Qualifications:

• SAP-certified Security or GRC credentials.
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations.
• Familiarity with HANA security and analytic privileges.
• Experience with continuous controls monitoring frameworks.
• Exposure to SAP RISE / Grow security operating models.

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.