IT Solution Architect Principal II - SAP Application Security

The SAP Application Security Architect is responsible for leading the strategy, design, and governance of SAP security architecture for the PSEG SAP Modernization project to migrate to S/4HANA. This role ensures the confidentiality, integrity, and availability of SAP systems by establishing robust security frameworks, access controls, and compliance standards aligned with business and regulatory requirements. Key responsibilities include designing and maintaining SAP role-based access controls (RBAC), Segregation of Duties (SoD) frameworks, and identity and access management (IAM) integrations across SAP landscapes including S/4HANA, SAP Fiori, SAP BTP, and related cloud platforms (including SAP Service Cloud). The role partners closely with business, audit, compliance, infrastructure, and application teams to proactively mitigate risk, support regulatory audits, and enable secure digital transformation initiatives.

The ideal candidate brings deep expertise in SAP authorization concepts, security architecture design, risk management, and governance, along with proven leadership experience in complex, multi-system SAP environments.

This position reports to the SAP Modernization Technology Delivery Manager., * Partner and collaborate with all stakeholders to understand and translate goals and objectives into architecture, roadmaps and capability models. Reconcile different perspectives and drive toward consensus.

• Look across applications, infrastructure, technology components and data to when developing roadmaps and capability models that outline how technology solutions are and will be structured.
• Create and maintain reusable artifacts and patterns. Harvests artifacts across initiatives to extend the library of reusable artifacts and patterns or to enhance the existing reusable artifacts.
• Develop policies, standards, guidelines, procedures and metrics that measure architectural quality and business outcomes.
• Engage with implementation teams to encourage and promote use of existing models, methods, services and other artifacts and capabilities resulting in increased speed of technology solution delivery, making such delivery more predictable and increasing the overall re-use of technology components.
• Research architectural paradigms and modern architecture constructs. Learn how processes such as continuous delivery or technologies such as micro services impact technology architecture.
• Ensure compatibility with existing solutions infrastructure, services and strategic requirements.
• Act as a bridge among various parties during implementation of architecture components and their integration.
• Communicate the objectives and business outcomes of the technology architecture and the associated use cases in which the organization will derive the most value.
• Provide support and leadership to inform and aid evaluation and decision making in technology spending.
• Participate in the ecosystem strategy development, including environmental analysis, opportunity identification, value cases and business innovation portfolio development., As an employee of PSEG, you should be aware that during storm restoration efforts, you may be required to perform functions outside of your routine duties and on a schedule that may be different from normal operations. For all roles, PSEG's drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. Employees who are hired or transfer into a federally regulated role (including positions covered by USDOT, PHMSA, or NRC regulations) are subject to random drug and alcohol testing, inclusive of marijuana. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and medically, the use of these products are prohibited for employees in federally regulated roles. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for a positive result.

If you are a current PSEG Long Island (PSEGLI) employee and offered an opportunity with PSEG or any of its subsidiaries other than PSEGLI, you will be treated as a new hire. Please note that as a new hire to PSEG, your benefits will change and generally will be consistent with other similarly situated PSEG new hires. Similarly, for PSEG employees who accept job opportunities with PSEGLI, your benefits will change and generally be consistent with other similarly situated new hires of PSEGLI., Remote Mathematics Regulatory Compliance Operations Auditing Leadership Information Technology Risk Mitigation Certified Information System Auditor (CISA) Governance Certified Information Systems Security Professional Risk Management Microservices Computer Science Sarbanes-Oxley Act (SOX) Compliance Technology Solutions Decision Making Access Controls Computer Engineering SAP Applications Regulatory Requirements Authorization (Computing) Information Sciences Landscaping Digital Transformation Process Control Compliance Auditing Code Of Federal Regulations Continuous Delivery

• Bachelor's degree in Engineering, Computer Science, Mathematics, Information Technology, Computer Engineering or Information Sciences preferred, or related field.
• 10 years of work experience in technology solution engineering. 12+ years of work experience in technology solution engineering without a degree.
• 6-8 years of experience in SAP BI/Reporting and Analytics solutions.
• Deep expertise in SAP security architecture across S/4HANA, ECC, BW/4HANA, SAP Fiori, and SAP BTP.
• Strong hands-on experience designing and maintaining role-based access controls (RBAC.)
• Proven experience implementing and managing Segregation of Duties (SoD) frameworks (e.g., SAP GRC Access Control.)
• Experience integrating SAP with enterprise Identity and Access Management (IAM) solutions.
• Strong understanding of SAP authorization objects, profiles, and transport management.
• Experience supporting SOX, NERC, or other regulatory compliance audits.
• Knowledge of SAP cloud security principles and hybrid landscape security design.
• Department of Energy's regulation 10 CFR 810 is required

Desired

• SAP certifications (e.g., SAP Security, SAP GRC, S/4HANA, SAP BTP).
• Industry certifications such as CISSP, CISM, CISA, or similar.
• Experience with SAP GRC modules (Access Control, Process Control, Risk Management)
• Experience designing security for SAP Fiori and SAP Gateway
• Familiarity with enterprise security frameworks (e.g., NIST, ISO 27001, COBIT)
• Experience leading large-scale SAP transformations (e.g., ECC to S/4HANA) from a security architecture perspective.
• Experience with large scale SAP Utility projects.

Some positions at PSEG require access to information covered by the Department of Energy's regulation 10 CFR 810 (Part 810). If applicable, the successful applicant must prove they are: (1) a citizen or national of the USA; OR (2) a lawful permanent resident of the United States (Non-Conditional Permanent I-551 / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or permanent resident of a "Generally Authorized" destination on the attached list not also a citizen, national, permanent resident of any country not listed; OR (4) a "Protected Individual" under the Immigration and Naturalization Act (8 U.S.C 1324b(a)(3))., Behavioral Health Identity And Access Management Certified Information Security Manager ISO/IEC 27001 Cloud Security SAP Security Enterprise Security Role-Based Access Control (RBAC) Permanent Resident Cards Control Objectives For Information And Related Technology (COBIT) SAP Fiori Environmental Analysis Cannabis Service Innovation SAP BI Accelerator SAP Governance Risk And Compliance Analytics Software Confidentiality Strategy Development

Here, you'll have the stability and exciting opportunities that come with being a Fortune 500 company - along with a supportive, friendly work environment where your contributions are valued.

We know life isn't one-size-fits-all, and neither is work. That's why we offer flexible work options depending on the role. In support of this model, roles have been categorized into one of three work location categories:

1. Onsite - roles where employees are expected to be onsite daily.
2. Hybrid fixed - roles that are a mix of remote work and onsite work fixed days each week
3. Hybrid flexible - roles that are a mix of remote work and onsite work, but the onsite requirements have greater flexibility. (i.e. 5-8 days a month vs. set days each week).

As an employee, if you are regularly scheduled to work 20 or more hours per week, you will have access to a wide range of comprehensive benefits from day one, designed to support your total well-being: medical, dental, vision, parental leave and family leave programs, behavioral health programs, 401(k) with company match, life insurance, tuition reimbursement, and generous paid time off.

We're one of the country's largest energy companies, with a vision of powering a future where people use energy more efficiently and it's safer and delivered more reliably than ever. We're also deeply connected to the communities we serve, with more than 13,000 employees working together to support our customers and make a difference every day., More than 13,000 people already call PSEG their work home, taking pride in providing safe, reliable service to millions of customers. If you're looking for a place where you can build a meaningful career and help power and support our communities, we'd love to welcome you to the team.