Platform Engineer, SAP Security

What you'll do

• Design and engineer scalable SAP security architecture and role models for multi-region environments.
• Lead SAP role redesign, rationalization, and the translation of business requirements into secure access models.
• Configure and optimize SAP GRC Access Control for risk analysis, SoD, and emergency access management.
• Integrate SAP access with enterprise IAM capabilities including SSO, MFA, and identity lifecycle processes.
• Manage SAP vulnerability remediation, security hardening, and patching in coordination with infrastructure teams.
• Implement AI-driven automation using SAP Joule and Business AI to streamline security operations and role engineering.
• Ensure SAP security controls comply with SOX, internal audits, and corporate cybersecurity requirements.
• Maintain security documentation, risk assessments, and remediation plans for internal and external audits.

What we're looking for

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
• 8+ years of SAP Security experience with significant hands-on experience in SAP S/4HANA.
• Strong experience designing and implementing SAP roles and authorization models.
• Demonstrated experience with S/4HANA transformation, role redesign, and security modernization.
• Experience working in a large, global, multi-operating-company environment.
• Demonstrated experience implementing AI-based automation for operational efficiency.
• Strong analytical, problem-solving, and communication skills.
• Experience with SAP Joule, SAP Business AI, Fiori security, or BTP security (preferred).