SAP S/4 HANA Security Architect (Remote)

Job Description This is a 12‑month+ contract with the possibility of extension, operating fully remote within PST hours, with limited travel a few times per year for key in‑person meetings as needed. In this role, you will lead SAP security for the client’s ECC to S/4HANA brownfield conversion, serving as the primary architect while remaining hands-on in execution. Day to day, you will drive security impact analysis, role redesign and remediation, SU25 execution, Fiori and HANA security implementation, and SoD/risk management. You’ll work closely with functional teams, Basis, Development, and Audit to ensure secure, compliant access across conversion, testing, cutover, and post–go-live stabilization. Key Responsibilities Lead SAP security strategy and execution for ECC → S/4HANA brownfield migration Perform security impact analysis using SAP Readiness Check and Simplification Item Catalog Execute SU25 Phases 1–4 and retrofit roles for S/4HANA compatibility Redesign and remediate enterprise roles at scale (1,000+ roles preferred) Design and implement Fiori security (catalogs, groups, business roles, OData, SICF) Configure and manage SoD controls using Security Weaver (Pathlock) or SAP GRC Access Control Migrate SoD rule sets and define mitigating controls during transition Facilitate security design and validation workshops with functional, technical, and audit teams Support security testing, cutover activities, and post-go-live access validation We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: Skills and Requirements 2–3 full lifecycle ECC → S/4HANA brownfield migration projects Hands-on SU25 execution and role retrofit experience Strong Fiori security implementation experience Large-scale role redesign and remediation expertise Hands-on experience with Security Weaver (Pathlock) or SAP GRC Access Control Strong understanding of SoD risk design and mitigation strategies in S/4HANA 10+ years of SAP Security experience (ECC and S/4HANA) Multiple completed ECC → S/4HANA brownfield conversions Deep experience with Security Weaver (Pathlock) Experience in SOX / ITGC-regulated environments Strong communication skills and ability to lead cross-functional workshops Insight Global