Senior SAP Architect
Location: Dearborn, MI 48124
Work Schedule: Hybrid, 4 days Onsite
Pay Range: Up to $77.67/hour, with medical insurance and 2 weeks of PTO
**NO C2C or C2H Candidates**
Position Summary:
Our Automotive Client’s program is seeking experienced Senior SAP Security Architect to define and drive the company’s security provisioning and access strategy across its SAP landscape. This role is critical to enabling global planning, harmonizing master data, and securing processes across regions. The SAP-based solution will support sourcing high-quality service parts and services globally, ensuring optimal cost and timely delivery.
Key Responsibilities:
- Design, implement, and support SAP security roles across various SAP products and projects.
- Administer SAP GRC configuration, including rule sets, workflows, and approvers for user provisioning, emergency access, and access recertification.
- Maintain SAP GRC master data and support audit and compliance activities.
- Perform user access reviews (UAR), configure workflows, and manage sync jobs (Repository, Auth, FF Log, Action Usage).
- Troubleshoot authorization issues using SU53/traces.
- Collaborate with internal/external auditors on SOD analysis and SOX compliance.
- Participate in SAP audit discussions and resolve SOD/SOX issues.
- Provide 24×7 production support on a rotational on-call basis.
- Work closely with PDO teams to support all security-related workstreams.
Required Skills & Experience:
- Minimum 3+ years of experience in SAP HANA Business Intelligence security design and support.
- 6+ years of experience in SAP Security Design, Implementation, and Administration in SAP S/4 HANA.
- Hands-on experience with SAP GRC v12 Access Control, including:
- Segregation of Duties (SoD)
- SAP GRC rule set
- MSMP and BRF+ workflow configuration
- Strong knowledge of SAP security objects in modules: BC, FI, MM/IM, PM, PS, QA, SD.
- Understanding of related business processes is a plus.
- Familiarity with SQL, HANA tenets, system databases, SAP cloud/on-prem environments, and HALM.
- Experience with SAP Identity Provider (IdP) is preferred.
Education:
- Required: Bachelor’s Degree
- Preferred: Advanced degree or relevant certifications in SAP Security or GRC
Additional Information:
- This is a hybrid role requiring 4 days per week onsite.
- Candidates must be comfortable with periodic 24×7 on-call support.
**NO C2C or C2H Candidates**