About this role

Title SAP Security Architect (Identity Management) - DOD

Position Contract

Location 100% Remote work

Job Descriptions:

Configure and build Access Control (AC 12.0+) modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and User Access Review (UAR).
Custom-build and maintain SoD (Segregation of Duties) and Sensitive Access risk matrices tailored to DoD business processes and S/4HANA transaction codes/Fiori apps.
Manage end-to-end Firefighter (EAM) administration: set up IDs, assign controllers, execute log reviews, and investigate unauthorized access during production incidents.

Build, maintain, and troubleshoot PFCG authorization roles, composite roles, and derived roles across S/4HANA, SAP Business Warehouse (BW/4HANA), and SAP HANA DB.
Design and configure Fiori security: build custom Catalogs, Groups, Target Mappings, and Space/Page layouts mapped to specific user personas.
Execute authorization trace analyses (ST01, ST22, SU53, authorization objects) to resolve user access bugs across non-production and production environments.

Perform hands-on audit remediation and gather evidence to satisfy FIAR (Financial Improvement and Audit Readiness), NIST 800-53, and DoD audit requirements.
Execute continuous vulnerability remediation and apply DISA STIG (Security Technical Implementation Guide) configurations for SAP ABAP, JAVA, and HANA database layers.
Monitor Security Audit Logs (SAL) and configure alerts for anomalous privileged activities.

Configure provisioning integrations between SAP GRC, SAP Cloud Identity Services (IAS/IPS), and DoD enterprise identity sources (CAC/PKI, Okta/Entra ID).
Automate provisioning workflows for user onboarding, access modifications, and immediate de-provisioning upon clearance or personnel changes.

SAP Security Architect (Identity Management) - DOD

Key skills