Title SAP Security Architect (Identity Management) - DOD
Position Contract
Location 100% Remote work
Job Descriptions:
Hands-On SAP GRC Configuration & Operations
Configure and build Access Control (AC 12.0+) modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and User Access Review (UAR).
Custom-build and maintain SoD (Segregation of Duties) and Sensitive Access risk matrices tailored to DoD business processes and S/4HANA transaction codes/Fiori apps.
Manage end-to-end Firefighter (EAM) administration: set up IDs, assign controllers, execute log reviews, and investigate unauthorized access during production incidents.
S/4HANA & Fiori Role Building
Build, maintain, and troubleshoot PFCG authorization roles, composite roles, and derived roles across S/4HANA, SAP Business Warehouse (BW/4HANA), and SAP HANA DB.
Design and configure Fiori security: build custom Catalogs, Groups, Target Mappings, and Space/Page layouts mapped to specific user personas.
Execute authorization trace analyses (ST01, ST22, SU53, authorization objects) to resolve user access bugs across non-production and production environments.
DoD Audit Readiness & DISA STIG Enforcement (A&S)
Perform hands-on audit remediation and gather evidence to satisfy FIAR (Financial Improvement and Audit Readiness), NIST 800-53, and DoD audit requirements.
Execute continuous vulnerability remediation and apply DISA STIG (Security Technical Implementation Guide) configurations for SAP ABAP, JAVA, and HANA database layers.
Monitor Security Audit Logs (SAL) and configure alerts for anomalous privileged activities.
Hands-On ICAM & Identity Integration
Configure provisioning integrations between SAP GRC, SAP Cloud Identity Services (IAS/IPS), and DoD enterprise identity sources (CAC/PKI, Okta/Entra ID).
Automate provisioning workflows for user onboarding, access modifications, and immediate de-provisioning upon clearance or personnel changes.