Senior SAP Security & IAM Engineer

Ahold Delhaize USA; Salisbury (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Ahold Delhaize USA is seeking a seasoned Security Engineer IV to drive SAP Security, IAM, and GRC operations within the Retail Spine modernization. You will own role design, access controls, and audit readiness across SAP S/4HANA and integrated systems, partnering with Audit, InfoSec, and SAP teams to ensure compliant, scalable security.

You will lead SoD frameworks, design standards, and integration patterns, including SSO, MFA, and Azure federation, to support secure SAP landscape maturity and

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• 10+ years of experience in SAP Security and SAP GRC Access Control.
• Strong hands on experience with SAP role design, SoD, Firefighter, GRC Access Control, and audit/compliance frameworks.
• Working knowledge of SAP S/4HANA, HANA, Fiori, SAP BTP, and integrated security architecture.
• Experience partnering with System Integrators and managing multi vendor delivery models.
• Strong understanding of SOX, PCI, GDPR, and enterprise security standards.
• Excellent communication, stakeholder engagement, and leadership skills.

Responsibilities

• Provide strategic and operational support across SAP Security and GRC functions across S/4HANA, BTP, Fiori, and RISE environment.
• Own the SAP role design standard, including role catalog governance, authorization concept, SoD frameworks, mitigation controls.
• Define and govern identity and access management integration standards (SSO, MFA, Azure AD/Entra) with security teams.
• Support SAP GRC platform operations including AEM/ARM/BRM/EAM, Firefighter, access reviews, and SoD analysis.
• Own audit readiness for SAP landscape including SOX, PCI, GDPR with audit partnership.
• Ensure security across full release lifecycle including transport reviews and change controls across delivery models.
• Govern security obligations with SI and vendor partners; maintain secure solution patterns and architecture.

Skills

SAP Security

GRC Access Control

Role design

SoD framework

Audit/compliance

SOX/PCI/GDPR

Security architecture

Communication

Education

Bachelor's degree in IT/Cybersecurity/CS

Master's degree (preferred)

Tools

SAP S/4HANA

SAP BTP

SAP Fiori

Azure AD/Entra ID

Job description

Ahold Delhaize USA is seeking a seasoned Security Engineer IV to drive SAP Security, IAM, and GRC operations within the Retail Spine modernization. You will own role design, access controls, and audit readiness across SAP S/4HANA and integrated systems, partnering with Audit, InfoSec, and SAP teams to ensure compliant, scalable security.

You will lead SoD frameworks, design standards, and integration patterns, including SSO, MFA, and Azure federation, to support secure SAP landscape maturity and