SAP Security Administrator

Our client is seeking an experienced SAP Security Administrator to support both day-to-day SAP security operations and a major identity and access management (IAM) initiative currently underway. This is a hands-on, contract-to-hire role covering ticket queue execution and formal role/access package design, with strong potential to convert to full-time. The ideal candidate genuinely enjoys IAM/access work and is comfortable owning both the tactical and strategic sides of SAP security. Responsibilities

• Monitor and work the SAP Security ticket queue, granting and assigning access for new program/system requests.
• Provide coverage for time-sensitive emergency access tickets during afternoon hours.
• Design SAP roles and access packages for business departments, including defining spend-approval thresholds and access levels by job role.
• Partner with business stakeholders to gather requirements, build high-level designs, and drive them through approval and implementation.
• Join cross-functional project meetings with VP- and principal-level staff to represent the SAP security component of various initiatives.
• Maintain segregation-of-duties (SoD) compliance across SAP roles, flagging and remediating conflicts as they arise.
• Conduct periodic access reviews and audits to ensure role assignments remain accurate and appropriately scoped.
• Troubleshoot and resolve authorization errors and access issues escalated from end users.
• Document role designs, access package configurations, and approval workflows for audit and knowledge-continuity purposes.
• Collaborate with the broader IAM team to align SAP security practices with overall identity governance standards.

• Minimum 5 years of experience in SAP Security Administration, including hands-on work in SAP S/4HANA (roles, access groups, access packages).
• Proven experience with formal role design and access package design, not just provisioning existing roles.
• Strong communication skills, with the ability to present to and gather requirements from senior stakeholders.
• Experience with SAP GRC (Governance, Risk & Compliance) concepts.
• Familiarity with SAP Cloud IAS/IPS (Identity Authentication/Provisioning Services).
• Proficiency with Active Directory administration and PowerShell.
• Bachelor’s degree preferred; exceptions considered based on experience.

Preferred Experience:

• ? SAP ECC ? SAP BW ? SAP EWM ? SAP HANA Database ? SAP Analytics Cloud ? SAP Datasphere ? SAP Integrated Business Planning ? SAP CRM ? SAP BTP ? SAP Fiori, * Minimum 5 years of experience in SAP Security Administration, including hands-on work in SAP S/4HANA (roles, access groups, access packages).

• Proven experience with formal role design and access package design, not just provisioning existing roles.
• Strong communication skills, with the ability to present to and gather requirements from senior stakeholders.
• Experience with SAP GRC (Governance, Risk & Compliance) concepts.
• Familiarity with SAP Cloud IAS/IPS (Identity Authentication/Provisioning Services).
• Proficiency with Active Directory administration and PowerShell.
• Bachelor’s degree preferred; exceptions considered based on experience.