SAP Security Administrator

Job Title: SAP Security Administrator

Location: Des Moines, IA

Duration: Contract to Hire (Contract to Permanent)

Schedule: Onsite Role

Job Description:

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Design, develop, implement, and maintain SAP security roles, profiles, authorizations, and access controls.

Lead security design activities for SAP S/4HANA, Fiori, BTP, Analytics Cloud, MDG, BusinessObjects, and future SAP cloud solutions.

Administer Fiori catalogs, spaces, pages, business roles, groups, and tile security.

Manage SAP HANA database security including user administration, privilege management, encryption, auditing, schema security, authentication configuration, and security hardening.

Administer Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).

Support Single Sign-On (SSO), Security Assertion Markup Language (SAML), Multi-Factor Authentication (MFA), and Microsoft Entra ID integrations.

Administer SAP Governance, Risk and Compliance (GRC) including Access Request Management, Access Risk Analysis, Emergency Access Management (Firefighter), and User Access Reviews (UAR).

Perform Segregation of Duties (SoD) analysis and recommend risk mitigation controls.

Support internal, external, SOX, regulatory, and financial audits.

Coordinate security requirements during upgrades, refreshes, disaster recovery testing, integrations, enhancements.

Monitor security events and investigate unauthorized access, role issues, and compliance violations.

Develop operational procedures, standards, runbooks, technical documentation, and audit evidence repositories.

Lead continuous improvement initiatives focused on automation, compliance, governance, and security maturity.

Provide mentoring and technical leadership to team members and project resources.

Partner with SAP Basis, Infrastructure, Network, Audit, Finance, and external vendors to deliver secure solutions.

Perform other related duties as assigned.

EDUCATION AND/OR EXPERIENCE:

Bachelor degree in Information Technology, Information Security, Computer Science, or related discipline.

5+ years of enterprise SAP Security experience.

5+ years supporting SAP S/4HANA environments.

2+ Experience supporting SAP RISE and Private Cloud environments preferred.

Extensive experience with SAP Fiori Security, SAP GRC, SAP BTP, IAS, IPS, and SAP HANA Security.

Strong experience supporting audits, compliance initiatives, and regulated environments.

Experience implementing and supporting cloud-based SAP solutions and identity management platforms.

Financial Services or Insurance industry experience preferred.

Experience leading projects and collaborating across multiple technology disciplines.