> Markdown version of [/jobs/ext/2148796-sap-security-grc-expert-access-control-contract-sme](https://www.wearedevelopers.com/jobs/ext/2148796-sap-security-grc-expert-access-control-contract-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SAP Security/GRC Expert - Access Control (Contract SME

- **Company:** After School Matters, Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Identity and Access Management, SAP (Applications), SAP Security, User Provisioning Software, SAP S/4HANA
- **Published:** August 20, 2026
- **Apply:** https://mandsc.applytojob.com/apply/hjMtfk9Re4/SAP-SecurityGRC-Expert-Access-Control-Contract-SME?source=GS

## About the Role

*US Citizenship required

 * Ability to work core hours in US Eastern Time
 * Senior-level practitioner: 10+ years of SAP Security experience with deep focus on GRC Access Control (10.x or 12.x)
 * Hands-on expertise across the GRC AC modules: Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter) and Access Risk Analysis (ARA)
 * Demonstrated experience remediating SoD conflicts and defining mitigating controls
 * Strong SAP role design background (single, composite, derived) and user provisioning
 * Experience troubleshooting MSMP workflows and BRF+ rules
 * Comfort operating in a post go-live stabilization context where scope surfaces iteratively
 * Strong written documentation and knowledge-transfer skills; able to teach as much as they deliver
 * Track record operating effectively in a fully remote engagement model
 * Eastern time working hours strongly preferred, * Experience with SAP S/4HANA environments
 * Experience as an embedded SME rather than a large-program contributor
 * Familiarity with cross-entity or shared-services access scenarios

Success Criteria:

 * Access Control environment cleaned up and documented
 * Identified SoD issues remediated or formally mitigated
 * Workflows functioning end to end
 * Internal resource meaningfully upskilled and able to sustain the environment post-engagement

## Description

* Perform post go-live cleanup of the SAP GRC Access Control environment
 * Diagnose and remediate broken or misconfigured workflows, including cross-organizational approval flows
 * Validate and remediate SoD issues surfaced during internal review; document mitigating controls where remediation is not feasible
 * Review and refine role design, user provisioning and access request workflows
 * Provide direct, hands-on knowledge transfer to the assigned internal resource across every workstream
 * Document remediation activities, design decisions and residual risks for clean handoff
 * Surface additional scope discovered during remediation for joint decisioning at the mid-engagement checkpoint


## Related Videos

- [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Independently together: how micro-applications improve developer experience + app performance](https://www.wearedevelopers.com/videos/452-independently-together-how-micro-applications-improve-developer-experience-app-performance)
- [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation)
- [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)
- [Mastering Remote Work: Tips for Developers](https://www.wearedevelopers.com/magazine/558-mastering-remote-work-tips-for-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)