SAP GRC Security Specialist Broadmind INC Tallahassee, FL Job Details Contract $50.19 - $60.44 an hour 4 days ago Qualifications SSO Cloud identity and access management (IAM) Computer science Systems integration Authorization controls implementation Computer Science SAP CRM Database compliance measures IT user and group management

SAP HANA

OAuth 2.0 Database configuration CISSP Governance, risk, and compliance (GRC) software System design Security architecture risk management Database security hardening Enterprise solutions implementation

SAP BW 4HANA

Enterprise software support Database security management Bachelor's degree Enterprise Integration Data access controls implementation SailPoint Regulatory Frameworks (Architecture security) SAP Analytics Cloud

SAP S/4HANA

Integration with Third-Party Services (system development) Identity and access management (IAM) architecture design

Full Job Description Role:

SAP Security Consultant Location:

Tallahassee location\

Onsite Exp:

15+

VISA:

NO H1B , OPT, CPT

Share profile at Summary SAP Consultant with over 12 years of experience architecting and implementing comprehensive security frameworks across SAP ECC, CRM, BW, Portal, S/4HANA, BW/4HANA, and SAP BTP environments. Deeply skilled in Fiori authorization design, GRC Access Control (ARA/EAM/ARM), segregation of duties (SoD) analysis, HANA database security, and integration with enterprise IAM platforms. Demonstrated ability to translate business requirements into secure, scalable, and audit-compliant role designs while collaborating with cross-functional teams through project delivery and support. Adept at ensuring end-to-end governance and compliance across hybrid SAP landscapes. 3.1 Required Consultant Experience

• Minimum of 10 years of SAP experience supporting ECC, BW, CRM, and transitioning to S/4HANA, BW/4HANA, and Fiori.
• Expertise in role-based access control for both technical and business end-users in S/4HANA and

BW/4HANA.

• Proficient in Fiori/UI5 security design: catalogs, groups, OData services, and business roles.
• Experience troubleshooting Fiori authorization issues using SAP tools and SAP Notes.
• Strong hands-on skills in SAP security tools:

SU24, SU25, SUIM, SU53, STAUTHTRACE.

• Implementation of

BW/4HANA

analysis authorizations and row-level data controls.

• Deep knowledge of

SAP HANA DB

security (including encryption, audit policies, and SQL-level controls).

• Integration of SAP with third-party IAM tools (e.g., Azure AD, SailPoint, Saviynt) via SCIM, SAML, OAuth, and IPS.
• Extensive experience with SAP BTP security across Launchpad Service, SAP Build Work Zone, CAP, and SAC.
• Configure and manage IAS/IPS for identity provisioning and SSO federation.
• Design secure hybrid architecture integrating on-prem SAP systems with BTP.
• GRC Access Control implementation (ARA, ARM, EAM) including SoD analysis and access review processes.
• Familiarity with

IRS 1075

(FTI) and OCSE audit controls and compliance requirements. Duties and Responsibilities

• Design, develop, and maintain SAP roles and authorizations across S/4HANA, ECC, BW/4HANA, CRM, and Portal systems.
• Perform security readiness and impact assessments for migrations to S/4HANA and HANA DB platforms.
• Provide SAP Security support across all modules and landscapes (on-prem and cloud).
• Implement and support SAP Fiori/UI5 security including catalog, group, OData service, and semantic object configurations.
• Perform backend role design including transaction codes, Web Dynpro, CRM Web UI, and OData.
• Troubleshoot Fiori applications and perform error log analysis for missing services and backend authorizations.
• Configure and manage IAS/IPS for BTP authentication and provisioning and ensure secure identity federation.
• Maintain and support SAP GRC Access Control modules (ARA, ARM, EAM), including provisioning and access reviews.
• Conduct SoD risk analysis, support internal/external audits, and address compliance findings.
• HANA DB security including role design, encryption configuration, and audit policy implementation.
• Support integration with IAM platforms using

SCIM, SAML

2.0, OAuth 2.0, and APIs.

• Establish secure trust and connectivity between SAP on-prem systems and BTP environments.
• Design and maintain hybrid identity architecture integrating AD, GRC, IAS/IPS, and SAP systems.
• Configure and support Central User Administration (CUA) and Single Sign-On (SSO).
• Perform system measurements and support SAP licensing audits.
• Review and revise SAP access roles to ensure separation of duties and compliance.
• Create and maintain security-related documentation including technical designs, SOPs, and audit artifacts.
• Support project managers with estimation, ticket tracking, and deliverables.
• Monitor security alerts and participate in remediation of EarlyWatch and security scan reports.
• Provide off-hours, weekend, holiday, and 24/7 on-call SAP Security support as required. Education and Certifications
• Bachelor's degree in computer science, MIS, or related field (or equivalent work experience).

Preferred:

SAP System & Security Certifications, ITIL Foundation.

Preferred Security Certifications:

CISA or CISSP.

• Experience with Florida DOR CAMS or SUNTAX projects is a plus.

Pay:

$50.19 - $60.44 per hour Application Question(s): willing to work on w2

Work Location:

In person