[Hiring] Senior Application Security SAP Consultant @C5MI Insight

Role Description

The Senior Application Security SAP Consultant is responsible for SAP application security and governance, risk, and compliance within an SAP S/4HANA environment, covering:

• Authorization design
• Role management
• Segregation of duties enforcement
• Access control evidence required to sustain system authorization and support financial audit

This position operates at the Senior level of the C5MI job architecture and contributes to delivery across a five-gate milestone structure spanning:

• Pre-design approval
• Preliminary design review
• Critical design review
• Production readiness review
• Closeout

Note: This position is contingent upon contract award.

Qualifications

• Bachelor’s degree in a related field or equivalent experience (Master’s degree or advanced certification a plus)
• 5-7 years of relevant experience with a Bachelor’s or Master’s degree, or 7-10 years of relevant experience without a Bachelor’s degree
• 5+ years of SAP Security and SAP governance, risk, and compliance experience, including authorization design ownership on at least one full lifecycle implementation
• Deep expertise in SAP S/4HANA authorization concept design, role architecture, and Fiori security
• Demonstrated experience designing and customizing a segregation of duties ruleset and a mitigating control framework with assigned ownership and monitoring
• Demonstrated experience designing SAP Access Control solutions across access risk analysis, access request management, business role management, and emergency access management
• Experience producing access control evidence for external financial audit or information system controls testing
• Must meet DoDM 8140.03 (formerly DoD 8570.01-M) IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE) prior to being granted privileged access
• Demonstrated ability to own workstreams and key solution components and to solve complex problems with minimal oversight
• Experience supporting multi-system SAP landscapes and enterprise-scale implementations
• Secret security clearance required: must hold an active Secret clearance or be able to obtain and maintain one prior to assignment (requires U.S. citizenship)

Requirements

• Owns the SAP authorization concept for the program, including the role architecture, naming standards, derivation strategy, and the governance process for role change
• Designs the segregation of duties framework, including ruleset design and customization, risk definitions, and the mitigating control catalog with assigned ownership and monitoring frequency
• Designs the governance, risk, and compliance solution architecture across access risk analysis, access request management, business role management, and emergency access management
• Designs preventive segregation of duties enforcement so that access risk is evaluated and resolved before provisioning
• Designs cross-system access risk analysis extending beyond the core platform to integrated applications within the program landscape
• Designs the user access review and recertification program, including campaign scope, frequency, reviewer assignment, and evidence retention
• Owns the mapping of access controls to applicable control frameworks
• Designs privileged access management for the SAP landscape
• Solves complex problems spanning multiple variables, modules, and interfacing systems
• Leads design for the assigned functional area, including options analysis, effort and risk assessment, and presentation of recommendations
• Serves as the recognized subject matter expert for the discipline
• Mentors and develops consultants at the III level
• Supports authority to operate, cybersecurity, audit, and compliance activities
• Supports cutover, go-live, and post-deployment hypercare activities
• Travels to client sites up to 50% to support workshops, design sessions, testing events, cutover, and go-live activities
• Adheres to all certified processes as part of our commitment to maintaining the highest standards of quality and information security
• Performs other related tasks as assigned by direct supervisor

Benefits

• Market competitive suite of benefits including medical, dental, vision, life, and long-term disability coverage
• 401(k) plan
• Bonus opportunities
• Paid holidays
• Paid time off

Compensation

In accordance with pay transparency law, the expected salary range for this position is $175,000 – $195,000 annually. The actual compensation offered will be determined based on factors such as the candidate’s experience, qualifications, skills, and location.

Application Deadline

We anticipate this job posting will be posted until 12/01/2026.

How to Apply

To apply for this position, use the application link provided in this job posting and complete the application and submit a resume. If the position requires a specific certification, please be sure to upload a copy of your certification when you apply.

If you would like to be considered for employment opportunities with C5MI and have accommodation needs such as for a disability or religious observance, please call us toll free at 1 (904) 431-7922 or send us an email.