Epicor Security & Access Controls Consultant

We are seeking an experienced ERP Security Consultant with strong Epicor expertise to assess, optimize, and redesign security and access controls within an existing Epicor 10 environment. This individual will evaluate current user permissions, security groups, and system access to ensure alignment with business responsibilities, strengthen governance, and establish a scalable role-based security framework.

The ideal candidate will have experience conducting ERP security assessments, designing role-based access control (RBAC) models, performing user access audits, and implementing security governance best practices within enterprise ERP environments.

Key Responsibilities

• Assess the current Epicor security configuration, including users, security groups, menu access, and functional permissions.
• Conduct a comprehensive audit of existing user access and security assignments.
• Identify excessive, inappropriate, or conflicting permissions and recommend remediation strategies.
• Analyze current access patterns and validate that permissions align with employees' job responsibilities.
• Design and implement a structured role-based security model that supports business and operational requirements.
• Create, organize, and maintain security groups and role assignments.
• Configure and streamline user access to appropriate transactions, dashboards, reports, and system functionality.
• Reduce user complexity by limiting visibility to only the menus and functions necessary for specific roles.
• Perform gap analysis and provide recommendations for security improvements and long-term governance.
• Partner with business stakeholders to define, document, and validate role definitions and access requirements.
• Develop security administration procedures, governance processes, and ongoing maintenance recommendations.
• Support testing, validation, user acceptance activities, and knowledge transfer to internal teams.

Required Qualifications

• Hands-on experience administering and securing Epicor ERP environments.
• Strong understanding of ERP security architecture, access controls, and user provisioning.
• Experience conducting security audits, access reviews, and permission assessments.
• Knowledge of role-based access control (RBAC) methodologies and security best practices.
• Experience designing and implementing user/group security structures.
• Ability to identify segregation of duties (SoD) conflicts and excessive access risks.
• Strong analytical, documentation, and stakeholder communication skills.
• Experience leading security remediation and governance initiatives.

Preferred Qualifications

• Experience with Epicor 10.x environments.
• Previous ERP security assessment or optimization project experience.
• Knowledge of change management and security governance frameworks.
• Experience simplifying ERP user experiences by reducing unnecessary functionality and menu visibility.
• Familiarity with enterprise compliance, audit, and risk management practices.

Typical Project Deliverables

• Security Assessment and Discovery Findings
• User and Access Audit Report
• Security Gap Analysis and Recommendations
• Role-Based Security Model Design
• User and Security Group Realignment
• Menu and Function Access Rationalization
• Testing and Validation Documentation
• Security Governance Framework
• Knowledge Transfer and Administrative Documentation

Ideal Candidate Background

Candidates with experience leading Epicor security reviews, ERP access governance projects, role-based security implementations, or ERP remediation initiatives will be highly valued. The ability to balance security requirements with a simplified and efficient end-user experience is critical to success in this engagement.