Hiring | SAP Security Lead in Foster City, CA
Contract Corp To Corp
Contract Independent
Contract W2
6 Months
No Travel Required
On-site
$60 - $70/hr
Centillion Infotech
Fitment
Dice Job Match Score™
🔢 Crunching numbers...
Job Details
Skills
- GRC
- BRIM
Summary
Greetings from Centillion Infotech LLC.,
Job Title: SAP Security Lead
Location: Foster City, CA (Onsite from Day 1).
Duration: Long term contract
Location: Foster City, CA (Onsite from Day 1).
Duration: Long term contract
Key Responsibilities:
- SAP BRIM Security Architecture: Design, build, and maintain role-based access control (RBAC) across the SAP BRIM landscape, including Subscription Order Management (SOM), Convergent Charging (CC), Convergent Invoicing (CI), and Contract Accounting (FI-CA).
- Segregation of Duties (SoD) & Compliance: Define, analyze, and enforce SoD matrices tailored for subscription-to-cash processes; conduct regular access risk analyses (ARA) using SAP IAG Access Analysis Service.
- SAP IAG Deployment & Administration: Configure and manage SAP Cloud IAG modules—including Access Request Service (ARS), Access Analysis Service (AAS), Access Certification Service (ACS), and Privileged Access Management (PAM).
- Cloud & Hybrid Identity Integration (SAP CIS): Configure SAP Cloud Identity Services, leveraging Identity Authentication Service (IAS) for SSO/MFA and Identity Provisioning Service (IPS) to synchronize identities and authorizations across SAP BTP, S/4HANA, and non-SAP solutions.
- Privileged Access & Emergency Management: Implement and oversee emergency access workflows (Firefighter/PAM) across BRIM and cloud systems to ensure emergency activity logging and review compliance.
- User Lifecycle Management: Automate user onboarding, role assignments, changes, and offboarding across cloud and on-premises systems using SAP IAG and IPS workflows.
- Audit Support & Access Recertification: Execute periodic user access certifications (UAC) via IAG, generate audit-ready compliance reports, and interface with internal/external auditors to ensure compliance
Required Qualifications & Experience
- Total Experience: 8–10+ years of dedicated SAP Security and GRC/IAG experience.
- Lead Experience: 3+ years in a Senior, Lead, or Architect capacity designing access controls, single sign-on (SSO), and governance models for enterprise SAP transformations.
- Domain Focus: At least 2 full-lifecycle S/4HANA Security & Fiori architecture and experience in SAP BRIM and 2+ deployment/migration projects involving SAP BTP, SAP Cloud Identity Services (CIS) and SAP IAG. Good to have exposure to FSM Preferred Skills
- Hands-on experience with cross-cloud identity federation using external IdPs like Microsoft Entra ID or Okta alongside SAP CIS.
- Familiarity with DevSecOps and automation tools (Python, PowerShell, Ansible, CI/CD pipelines) for SAP security deployments.
- Exposure to SAP Enterprise Architecture tools (Signavio, EAD) and Data Privacy frameworks (ILM, Read Access Logging, GDPR/CCPA).
Centillion Infotech LLC is an equal opportunity employer and does not discriminate on the basis of race, color, gender, religion, age, sexual orientation, national origin or citizenship status or ethnic origin, disability, marital status, veteran status or any other occupationally irrelevant criteria.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
- Dice Id: 91071044
- Position Id: 199-48189-1793309507
- Posted 2 hours ago
Company Info
Centillion Infotech LLC has served clients since 2017 from our US headquarters in Coppell, Texas, and our India office in Visakhapatnam, Andhra Pradesh. We work with organizations across the United States and India that need both the technology capability to change a system and the workforce capability to keep it running.
That combination is deliberate. Modernization programs stall when strategy, engineering and staffing sit with three parties who each own a fragment of the outcome.
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.