Momentum Functional Application Security Finance Managed Services Consultant

Deloitte • Arlington, VA

22d • $72,900 - $121,500 • Onsite

About The Position

As a Project Consultant on Deloitte’s Finance Managed Services team, you will support clients using Momentum ERP by administering user access and account lifecycle activities, configuring roles and permissions, and testing application security controls. You will incorporate security requirements into functional work, help identify and address security gaps, and collaborate with product owners, developers, quality assurance teams, and other stakeholders on access reviews, audits, release readiness, and go-live assessments. The role also contributes security and access-control perspectives to ERP strategy and roadmap decisions.

This position is part of Deloitte’s Government & Public Services practice and Finance Transformation work. The Project Delivery Talent Model focuses on delivering services for a current client need, without additional expectations related to business development or promotion; employment is tied to the project role. The position is based in Rosslyn, Virginia, and the posting states an average co-location expectation of five times per week.

Requirements

• Bachelor’s degree.
• At least 4 years of experience supporting Momentum ERP as an application security analyst, including user and application administration.
• At least 3 years of experience configuring and testing role-based access controls, separation-of-duties controls, authentication, authorization, session management, data handling, and business logic controls in enterprise applications.
• Experience supporting cloud-hosted enterprise applications subject to access-control and audit requirements.
• Active Top Secret security clearance with eligibility for upgrade to SCI.
• Reside within a commutable distance of the assigned office and be able to commute daily, if required, without overnight accommodations.
• Ability to co-locate in Rosslyn, Virginia, an average of five times per week.
• Legally authorized to work in the United States without employer sponsorship now or in the future.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.

Nice To Haves

• Experience executing security test cases aligned with business scenarios in Momentum applications.
• Experience embedding security requirements in user stories, acceptance criteria, functional designs, and configuration changes.
• Experience supporting access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Experience validating the handling of personally identifiable information (PII), financial data, or regulated data in enterprise applications.

Responsibilities

• Administer user access requests and account lifecycle activities, including provisioning, modifying, and decommissioning accounts in accordance with cybersecurity controls and processes within Momentum.
• Configure and maintain user roles, permissions, and access profiles in alignment with role-based access control (RBAC) and separation-of-duties requirements.
• Perform functional application-security testing of authentication, authorization, session management, data handling, business logic, and integrations.
• Embed security requirements in user stories, acceptance criteria, functional designs, and configuration changes, and identify and help close security gaps.
• Partner with product owners, developers, quality assurance teams, and stakeholders to support access reviews, audit requests, pre-release security reviews, and go-live readiness assessments.
• Collaborate with stakeholders to inform enterprise resource planning strategy and roadmap decisions based on security, access-control, and operational needs.

Benefits

• Benefits package described as competitive for project delivery-focused professionals.
• Potential eligibility to participate in a discretionary annual incentive program, subject to its rules and other factors.
• Deloitte offers professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level