[Remote] Platform Engineer, SAP Security
Note: The job is a remote job and is open to candidates in USA. Mondelēz International is a global snacking company seeking a Platform Engineer, SAP Security. The role designs, engineers, governs, and continuously optimizes SAP security and access controls, with emphasis on S/4HANA role architecture, SAP GRC, segregation of duties, vulnerability management, compliance, automation, and enterprise IAM integration.
Responsibilities
- Lead and execute SAP Security activities supporting S/4HANA transformation and modernization initiatives
- Design and implement scalable SAP security architecture for a multi-operating-company / multi-region environment
- Lead SAP role redesign and rationalization, including business-role architecture, composite/single roles, derived roles, organizational values, and authorization objects
- Translate business process requirements into secure and appropriately segregated SAP access models
- Identify opportunities to simplify, standardize, and harmonize security roles across operating companies while accommodating legitimate local requirements
- Support SAP cutover, migration, testing, UAT, and go-live security activities
- Design and engineer SAP roles based on least privilege, business need, and risk-based access principles
- Perform role analysis, remediation, rationalization, and optimization across existing SAP environments
- Establish and maintain role design standards, naming conventions, ownership models, and approval processes
- Identify and eliminate excessive, conflicting, dormant, and unnecessary access
- Design controls for privileged and sensitive SAP access, including emergency/firefighter access
- Partner with IAM teams to integrate SAP access with enterprise IGA, SSO, MFA, PAM/PIM, and identity lifecycle processes
- Act as a security SME during business process transformation and operating-model changes
- Support SAP license-rightsizing initiatives while maintaining required security and business functionality
- Configure, administer, and optimize SAP GRC Access Control capabilities, including:
- Access Risk Analysis
- Business Role Management
- Access Request Management
- Emergency Access Management
- SoD and critical-access analysis
- Perform SoD risk analysis during role design, remediation, provisioning, and business transformation
- Partner with Internal Audit, Compliance, and business control owners to define appropriate mitigating controls
- Support periodic access reviews and certification activities
- Partner with SAP Basis and infrastructure teams on SAP vulnerability management, security hardening, patching, and remediation
- Assess SAP security advisories, SAP Notes, vulnerabilities, and configuration risks and coordinate remediation with appropriate technical teams
- Collaborate with Cybersecurity/SOC teams on SAP logging, monitoring, alerting, and security operations
- Evaluate and leverage SAP Joule and SAP Business AI capabilities to automate and streamline SAP Security activities, including access analysis, role design, security operations, risk identification, troubleshooting, and security-related user support
- Identify opportunities to apply AI to SAP role engineering, SoD analysis, access certification, vulnerability management, and security monitoring, while maintaining appropriate human oversight and control validation
- Partner with SAP and enterprise AI teams to ensure AI-enabled SAP capabilities follow security, privacy, authorization, and governance requirements
- Ensure SAP security controls meet applicable SOX, internal control, audit, regulatory, and corporate cybersecurity requirements
- Provide evidence and support for internal and external audits
- Design sustainable security controls that are embedded into SAP processes rather than dependent on manual intervention
- Maintain security documentation, control procedures, risk assessments, and remediation plans
Skills
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent experience
- 8+ years of SAP Security experience, with significant hands-on experience in SAP S/4HANA
- Strong experience designing and implementing SAP roles and authorization models
- Demonstrated experience with S/4HANA transformation, role redesign, and security modernization
- Experience working in a large, global, multi-operating-company environment
- Demonstrated experience implementing AI based automation for operational efficiency
- Strong analytical, problem-solving, and communication skills
- Experience with SAP Joule, SAP Business AI, or AI-enabled SAP security and automation capabilities
- Understanding of AI security, authorization, data protection, and governance considerations within SAP environments
- Experience with SAP Fiori security and embedded analytics
- Experience with SAP Cloud / BTP security and hybrid SAP environments
- Experience with SAP Identity Management or integration with IGA platforms such as SailPoint
- Experience with SAP license optimization
- Experience supporting large-scale global SAP transformations
- Experience with security architecture, Zero Trust, and risk-based access models
Benefits
- Participation in a highly competitive bonus program with possibility for overachievement based on performance and company results.
- Health insurance
- Wellness and family support programs
- Life and disability insurance
- Retirement savings plans
- Paid leave programs
- Education related programs
- Paid holidays and vacation time
Company Overview
Company H1B Sponsorship