SAP Security Architect (Identity Management) - DOD

Job Descriptions:

Hands-On SAP GRC Configuration & Operations

S/4HANA & Fiori Role Building

DoD Audit Readiness & DISA STIG Enforcement (A&S)

Hands-On ICAM & Identity Integration

• Configure and build Access Control (AC 12.0+) modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and User Access Review (UAR).
• Custom-build and maintain SoD (Segregation of Duties) and Sensitive Access risk matrices tailored to DoD business processes and S/4HANA transaction codes/Fiori apps.
• Manage end-to-end Firefighter (EAM) administration: set up IDs, assign controllers, execute log reviews, and investigate unauthorized access during production incidents.

• Build, maintain, and troubleshoot PFCG authorization roles, composite roles, and derived roles across S/4HANA, SAP Business Warehouse (BW/4HANA), and SAP HANA DB.
• Design and configure Fiori security: build custom Catalogs, Groups, Target Mappings, and Space/Page layouts mapped to specific user personas.
• Execute authorization trace analyses (ST01, ST22, SU53, authorization objects) to resolve user access bugs across non-production and production environments.

• Perform hands-on audit remediation and gather evidence to satisfy FIAR (Financial Improvement and Audit Readiness), NIST 800-53, and DoD audit requirements.
• Execute continuous vulnerability remediation and apply DISA STIG (Security Technical Implementation Guide) configurations for SAP ABAP, JAVA, and HANA database layers.
• Monitor Security Audit Logs (SAL) and configure alerts for anomalous privileged activities.

• Configure provisioning integrations between SAP GRC, SAP Cloud Identity Services (IAS/IPS), and DoD enterprise identity sources (CAC/PKI, Okta/Entra ID).
• Automate provisioning workflows for user onboarding, access modifications, and immediate de-provisioning upon clearance or personnel changes.