Senior Application Security SAP Consultant

Accountabilities:: Own the SAP authorization concept, including role architecture, naming standards, derivation strategies, and governance processes for role changes. Design segregation of duties frameworks, including rulesets, risk definitions, mitigating controls, ownership, and monitoring requirements. Design SAP governance, risk, and compliance solutions covering access risk analysis, access requests, business role management, and emergency access management. Establish preventive segregation of duties controls and risk simulation within access request workflows, including cross-system access risk analysis for integrated applications. Design user access review and recertification programs, including campaign scope, frequency, reviewer assignments, and evidence retention. Map access controls to applicable risk management and financial audit control frameworks and produce supporting evidence for audits and authorization milestones. Design privileged access management capabilities, including privileged role restrictions, emergency access governance, and audit-ready logging. Lead assigned security workstreams and solution components, performing options analysis, effort and risk assessments, and presenting recommendations to solution architecture teams. Serve as the SAP security subject matter expert during milestone gate reviews, government working groups, and formal design reviews. Mentor consultants and contribute to improving functional depth and solution design maturity across the team. Support authority-to-operate, cybersecurity, audit, compliance, cutover, go-live, and post-deployment activities, including transition to the sustainment organization. Travel to client locations for workshops, design sessions, testing, cutover, and go-live activities as required by the program. Requirements: Bachelor’s degree in a related field or equivalent professional experience; a master’s degree or advanced certification is a plus. 5+ years of SAP Security and SAP governance, risk, and compliance experience, including ownership of authorization design on at least one full lifecycle implementation. Deep expertise in SAP S/4HANA authorization concepts, role architecture, and Fiori security. Demonstrated experience designing and customizing segregation of duties rulesets and mitigating control frameworks with defined ownership and monitoring. Strong experience designing SAP Access Control solutions across access risk analysis, access request management, business role management, and emergency access management. Experience producing access control evidence for external financial audits or information systems controls testing. Experience supporting multi-system SAP environments and enterprise-scale implementations. Demonstrated ability to independently own workstreams, solve complex problems, and make design decisions with minimal oversight. Must meet applicable DoD IAT Level II baseline certification requirements, such as CompTIA Security+ CE, before receiving privileged access and obtain any required computing environment certification within the required timeframe. Must hold an active Secret security clearance or be able to obtain and maintain one before assignment; eligibility requires U.S. citizenship. Experience with federal ERP modernization, defense business systems, risk management framework authorization activities, identity and access management integrations, or SAP HANA database security is preferred. Experience with federated authentication, hardware-based multifactor authentication, or segregation of duties redesigns is a plus. CISSP, CISA, SAP Security, SAP Access Control, or equivalent security and audit certifications are preferred. Strong communication, leadership, collaboration, accountability, and mentoring skills are essential. Benefits: Annual salary of $175,000–$195,000. Compensation may vary based on experience, qualifications, skills, and location. Medical, dental, and vision insurance. Life insurance and long-term disability coverage. 401(k) plan. Bonus opportunities. Paid holidays and paid time off. Opportunity to work on complex, mission-critical SAP and security programs. Professional development and continuous learning opportunities. Collaborative environment emphasizing ownership, initiative, accountability, and innovation. Opportunity to contribute directly to high-impact modernization and cybersecurity initiatives. Remote position within the United States, with client-site travel of up to 50% depending on program needs.