Senior Application Security SAP Consultant

Accountabilities:

• Own the SAP authorization concept, including role architecture, naming standards, derivation strategies, and governance processes for role changes.
• Design segregation of duties frameworks, including rulesets, risk definitions, mitigating controls, ownership, and monitoring requirements.
• Design SAP governance, risk, and compliance solutions covering access risk analysis, access requests, business role management, and emergency access management.
• Establish preventive segregation of duties controls and risk simulation within access request workflows, including cross-system access risk analysis for integrated applications.
• Design user access review and recertification programs, including campaign scope, frequency, reviewer assignments, and evidence retention.
• Map access controls to applicable risk management and financial audit control frameworks and produce supporting evidence for audits and authorization milestones.
• Design privileged access management capabilities, including privileged role restrictions, emergency access governance, and audit-ready logging.
• Lead assigned security workstreams and solution components, performing options analysis, effort and risk assessments, and presenting recommendations to solution architecture teams.
• Serve as the SAP security subject matter expert during milestone gate reviews, government working groups, and formal design reviews.
• Mentor consultants and contribute to improving functional depth and solution design maturity across the team.
• Support authority-to-operate, cybersecurity, audit, compliance, cutover, go-live, and post-deployment activities, including transition to the sustainment organization.
• Travel to client locations for workshops, design sessions, testing, cutover, and go-live activities as required by the program.

Requirements:

• Bachelor’s degree in a related field or equivalent professional experience; a master’s degree or advanced certification is a plus.
• 5+ years of SAP Security and SAP governance, risk, and compliance experience, including ownership of authorization design on at least one full lifecycle implementation.
• Deep expertise in SAP S/4HANA authorization concepts, role architecture, and Fiori security.
• Demonstrated experience designing and customizing segregation of duties rulesets and mitigating control frameworks with defined ownership and monitoring.
• Strong experience designing SAP Access Control solutions across access risk analysis, access request management, business role management, and emergency access management.
• Experience producing access control evidence for external financial audits or information systems controls testing.
• Experience supporting multi-system SAP environments and enterprise-scale implementations.
• Demonstrated ability to independently own workstreams, solve complex problems, and make design decisions with minimal oversight.
• Must meet applicable DoD IAT Level II baseline certification requirements, such as CompTIA Security+ CE, before receiving privileged access and obtain any required computing environment certification within the required timeframe.
• Must hold an active Secret security clearance or be able to obtain and maintain one before assignment; eligibility requires U.S. citizenship.
• Experience with federal ERP modernization, defense business systems, risk management framework authorization activities, identity and access management integrations, or SAP HANA database security is preferred.
• Experience with federated authentication, hardware-based multifactor authentication, or segregation of duties redesigns is a plus.
• CISSP, CISA, SAP Security, SAP Access Control, or equivalent security and audit certifications are preferred.
• Strong communication, leadership, collaboration, accountability, and mentoring skills are essential.

Benefits:

• Annual salary of $175,000–$195,000.
• Compensation may vary based on experience, qualifications, skills, and location.
• Medical, dental, and vision insurance.
• Life insurance and long-term disability coverage.
• 401(k) plan.
• Bonus opportunities.
• Paid holidays and paid time off.
• Opportunity to work on complex, mission-critical SAP and security programs.
• Professional development and continuous learning opportunities.
• Collaborative environment emphasizing ownership, initiative, accountability, and innovation.
• Opportunity to contribute directly to high-impact modernization and cybersecurity initiatives.
• Remote position within the United States, with client-site travel of up to 50% depending on program needs.