Platform Engineer, SAP Security

Mondelēz International • East Hanover, NJ

6d • $86,900 - $119,515 • Remote

About The Position

This role will be responsible for the design, engineering, governance, and continuous optimization of SAP security and access controls, with a strong focus on S/4HANA role architecture, business process alignment, automation, SAP GRC, Segregation of Duties (SoD), vulnerability management, compliance, and integration with enterprise IAM capabilities. The ideal candidate combines deep SAP Security and S/4HANA technical expertise with a strong understanding of business processes, internal controls, IAM, and large-scale transformation programs. This person will partner closely with SAP Basis, functional teams, IAM, Cybersecurity, Internal Audit, Compliance, and business stakeholders to build secure and sustainable solutions.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent experience.
• 8+ years of SAP Security experience, with significant hands-on experience in SAP S/4HANA.
• Strong experience designing and implementing SAP roles and authorization models.
• Demonstrated experience with S/4HANA transformation, role redesign, and security modernization.
• Experience working in a large, global, multi-operating-company environment.
• Demonstrated experience implementing AI based automation for operational efficiency.
• Strong analytical, problem-solving, and communication skills.

Nice To Haves

• Experience with SAP Joule, SAP Business AI, or AI-enabled SAP security and automation capabilities.
• Understanding of AI security, authorization, data protection, and governance considerations within SAP environments.
• Experience with SAP Fiori security and embedded analytics.
• Experience with SAP Cloud / BTP security and hybrid SAP environments.
• Experience with SAP Identity Management or integration with IGA platforms such as SailPoint.
• Experience with SAP license optimization.
• Experience supporting large-scale global SAP transformations.
• Experience with security architecture, Zero Trust, and risk-based access models.

Responsibilities

• Lead and execute SAP Security activities supporting S/4HANA transformation and modernization initiatives.
• Design and implement scalable SAP security architecture for a multi-operating-company / multi-region environment.
• Lead SAP role redesign and rationalization, including business-role architecture, composite/single roles, derived roles, organizational values, and authorization objects.
• Translate business process requirements into secure and appropriately segregated SAP access models.
• Identify opportunities to simplify, standardize, and harmonize security roles across operating companies while accommodating legitimate local requirements.
• Support SAP cutover, migration, testing, UAT, and go-live security activities.
• Design and engineer SAP roles based on least privilege, business need, and risk-based access principles.
• Perform role analysis, remediation, rationalization, and optimization across existing SAP environments.
• Establish and maintain role design standards, naming conventions, ownership models, and approval processes.
• Identify and eliminate excessive, conflicting, dormant, and unnecessary access.
• Design controls for privileged and sensitive SAP access, including emergency/firefighter access.
• Partner with IAM teams to integrate SAP access with enterprise IGA, SSO, MFA, PAM/PIM, and identity lifecycle processes.
• Act as a security SME during business process transformation and operating-model changes.
• Support SAP license-rightsizing initiatives while maintaining required security and business functionality.
• Configure, administer, and optimize SAP GRC Access Control capabilities, including: Access Risk Analysis, Business Role Management, Access Request Management, Emergency Access Management, SoD and critical-access analysis.
• Perform SoD risk analysis during role design, remediation, provisioning, and business transformation.
• Partner with Internal Audit, Compliance, and business control owners to define appropriate mitigating controls.
• Support periodic access reviews and certification activities.
• Partner with SAP Basis and infrastructure teams on SAP vulnerability management, security hardening, patching, and remediation.
• Assess SAP security advisories, SAP Notes, vulnerabilities, and configuration risks and coordinate remediation with appropriate technical teams.
• Collaborate with Cybersecurity/SOC teams on SAP logging, monitoring, alerting, and security operations.
• Evaluate and leverage SAP Joule and SAP Business AI capabilities to automate and streamline SAP Security activities, including access analysis, role design, security operations, risk identification, troubleshooting, and security-related user support.
• Identify opportunities to apply AI to SAP role engineering, SoD analysis, access certification, vulnerability management, and security monitoring, while maintaining appropriate human oversight and control validation.
• Partner with SAP and enterprise AI teams to ensure AI-enabled SAP capabilities follow security, privacy, authorization, and governance requirements.
• Ensure SAP security controls meet applicable SOX, internal control, audit, regulatory, and corporate cybersecurity requirements.
• Provide evidence and support for internal and external audits.
• Design sustainable security controls that are embedded into SAP processes rather than dependent on manual intervention.
• Maintain security documentation, control procedures, risk assessments, and remediation plans.

Benefits

• health insurance
• wellness and family support programs
• life and disability insurance
• retirement savings plans
• paid leave programs
• education related programs
• paid holidays and vacation time
• highly competitive bonus program with possibility for overachievement based on performance and company results

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree