Senior SAP Security & DevSecOps Leader

Builders FirstSource; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Builders FirstSource seeks an experienced SAP DevSecOps Lead to embed security, compliance, and governance across the SAP landscape. The role leads secure delivery for S/4HANA, BTP, SAC, and related systems, aligning with audit and regulatory expectations.

The candidate will design secure environments, validate security controls, and implement roles, access governance, and incident response within CI/CD and release processes.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 5+ years of SAP security, SAP GRC, cybersecurity, identity and access management, security architecture, or SAP platform delivery.
• Experience with large SAP transformations including S/4HANA and cloud services.
• Knowledge of SAP authorization concepts, role design, and privileged access.
• Familiarity with SAP change, transport, release, testing, and production support processes.
• Experience with Microsoft PowerBI is a plus.

Responsibilities

• Embed security, compliance, and governance into SAP design, build, testing, deployment, and operation.
• Design, build, and harden secure SAP environments across S/4HANA, BTP, SAC, MDG, IBP, BWZ, Solution Manager, SAP RISE, and connected systems.
• Configure and validate SAP security controls, including logging, monitoring, and transport governance.
• Engineer SAP roles and authorizations using least privilege and RBAC.
• Implement secure‑by‑design controls within SAP build, transport, release, and CI/CD processes.

Skills

SAP security architecture

Identity and access management

Security governance

Executive communication

Education

Bachelor’s degree

Tools

PowerBI

SAC

Fiori

MDG

SAP Solution Manager

SAP RISE

Job description

Builders FirstSource seeks an experienced SAP DevSecOps Lead to embed security, compliance, and governance across the SAP landscape. The role leads secure delivery for S/4HANA, BTP, SAC, and related systems, aligning with audit and regulatory expectations.

The candidate will design secure environments, validate security controls, and implement roles, access governance, and incident response within CI/CD and release processes.