SAP S/4 HANA Security Architect (Remote)

This is a 12-month+ contract with the possibility of extension, operating fully remote within PST hours, with limited travel a few times per year for key in-person meetings as needed. In this role, you will lead SAP security for the client’s ECC to S/4HANA brownfield conversion, serving as the primary architect while remaining hands-on in execution. Day to day, you will drive security impact analysis, role redesign and remediation, SU25 execution, Fiori and HANA security implementation, and SoD/risk management. You’ll work closely with functional teams, Basis, Development, and Audit to ensure secure, compliant access across conversion, testing, cutover, and post-go-live stabilization.

Key Responsibilities

Lead SAP security strategy and execution for ECC * S/4HANA brownfield migration

Perform security impact analysis using SAP Readiness Check and Simplification Item Catalog

Execute SU25 Phases 1-4 and retrofit roles for S/4HANA compatibility

Redesign and remediate enterprise roles at scale (1,000+ roles preferred)

Design and implement Fiori security (catalogs, groups, business roles, OData, SICF)

Configure and manage SoD controls using Security Weaver (Pathlock) or SAP GRC Access Control

Migrate SoD rule sets and define mitigating controls during transition

Facilitate security design and validation workshops with functional, technical, and audit teams

Support security testing, cutover activities, and post-go-live access validation

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global’s Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

2-3 full lifecycle ECC * S/4HANA brownfield migration projects

Hands-on SU25 execution and role retrofit experience

Strong Fiori security implementation experience

Large-scale role redesign and remediation expertise

Hands-on experience with Security Weaver (Pathlock) or SAP GRC Access Control

Strong understanding of SoD risk design and mitigation strategies in S/4HANA 10+ years of SAP Security experience (ECC and S/4HANA)

Multiple completed ECC * S/4HANA brownfield conversions

Deep experience with Security Weaver (Pathlock)

Experience in SOX / ITGC-regulated environments

Strong communication skills and ability to lead cross-functional workshops