SAP Access Control Engineer

Bright Vision Technologies; Wildwood (MO); Remote; USD 128,000 - 145,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks across SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors.

The role covers SAP role design, user provisioning, segregation of duties analysis, audit support, and operation of SAP GRC suites, partnering with audit and compliance teams to ensure a secure, auditable SAP environment.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Responsibilities

• Design, implement, and operate SAP access-control frameworks for SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors).
• Manage SAP role design, user provisioning, and segregation of duties analyses.
• Provide audit support and remediation coordination with compliance teams.
• Operate SAP GRC Access Control and Process Control environments.
• Collaborate with audit, compliance, and business teams to maintain a secure SAP environment.

Skills

SAP security

Audit liaison

Documentation

Communication

Regulatory knowledge

Education

Bachelor's degree in CS/Engineering

Tools

SAP GRC Access Control

SAP GRC Process Control

Fiori security

BTP security

SCIM integrations

SAP IDM

HANA security

Job description

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title:

SAP Access Control Engineer

Location:

100% Remote (U.S.)

Position Type:

Full-time, Direct W2

Salary Range:

$128,000–$145,000 Annually

Experience Required:

6+ years

Sponsorship:

U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary:

We are seeking an experienced SAP Access Control Engineer to design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. In this role you will be responsible for SAP role design, user provisioning, segregation of duties analysis, audit support, and the technical operation of SAP GRC suites. The ideal candidate will combine deep expertise in SAP authorization concepts with strong hands-on experience operating SAP GRC Access Control and Process Control, and will partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Required Qualifications:

• Bachelor's degree in Computer Science, Engineering, or a related technical discipline.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands-on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Preferred Qualifications:

• SAP-certified Security or GRC credentials.
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations.
• Familiarity with HANA security and analytic privileges.
• Experience with continuous controls monitoring frameworks.
• Exposure to SAP RISE / Grow security operating models.

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.