SAP Access Governance Engineer (SoD & ICAM)

PowerToFly; United States; On-site; USD 103,000 - 171,000; Full time

Job summary

Deloitte is seeking a Software Engineer II on the Enterprise Security team to help design SAP S/4 access governance and strengthen ICAM capabilities across client environments.

You will collaborate with stakeholders, support audits, and contribute to go-live readiness while maintaining SoD controls and risk management. This role requires US work authorization and active Secret clearance.

Qualifications

• Bachelor's degree required.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Active Secret security clearance required.
• Ability to travel 25%, on average, based on the work you do and the clients and industries/sectors you serve.
• 3+ years of experience with SAP system security and access governance, including designing access governance for SAP S/4 systems, defining personas and access requirements, designing role-based and attribute-based access controls, identifying and remediating Separation of Duties (SoD) conflicts, and supporting Identity, Credential, and Access Management (ICAM) solution setup.
• 3+ years of experience with Security Assessment Plans and compliance activities, including supporting audits and compliance testing by producing evidence packs, explaining controls, and remediating findings.

Responsibilities

• Drive the design of access governance for one or more SAP S/4 systems, including evaluation of business processes to define personas, access requirements, and role-based access needs.
• Design SAP role-based and attribute-based access controls, including SoD conflict identification and remediation.
• Support setup of new SAP systems within the client's ICAM solution, including user provisioning design, implementation, and SoD risk analysis.
• Collaborate with client stakeholders on business transformation initiatives, including access control policy and end-user role mapping execution.
• Provide client support in preparation for system go-live, including troubleshooting and resolving access issues.
• Support audits and compliance testing by producing evidence packs, explaining controls, and remediating findings.

Skills

SAP security governance

Access governance design

SoD remediation

ICAM setup

Audit support

Communication

Project leadership

Time management

Education

Bachelor's degree

Tools

SAP

Job description

Deloitte is seeking a Software Engineer II on the Enterprise Security team to help design SAP S/4 access governance and strengthen ICAM capabilities across client environments.

You will collaborate with stakeholders, support audits, and contribute to go-live readiness while maintaining SoD controls and risk management. This role requires US work authorization and active Secret clearance.