SAP Security Architect

Job ID: [[id]]
CRH Americas Building Products is reinventing what's possible in building solutions. We are the leading provider of innovative outdoor living products and utility infrastructure solutions for the water, energy, and communications markets throughout North America. We're a trusted and strategic partner to engineers, contractors, distributors, specifiers, retailers and homeowners alike as the manufacturer of precast concrete, polymer concrete, and plastic infrastructure products. Our portfolio of brands includes Oldcastle APG, Oldcastle Infrastructure, Belgard® hardscape, Echelon® Masonry, RDI® railing, Catalyst™ Fence Solutions, Sakrete® packaged concrete, Amerimix® mortar, Pebble Technology International® pool finishes, and Techniseal® sands and sealant technologies.
Job Summary
Oldcastle Infrastructure Inc. (OII) is looking for a SAP Security Architect. He/She will be responsible for architecting, designing, implementing, and supporting SAP Security and in particular SAP GRC Access control modules in a greenfield implementation environment of S4/Hana private cloud. The right candidate is able to architect and design a SAP solution and to follow a pragmatic hands-on approach to put it in place.
This position will report to the Director SAP CoE and will work closely with the SAP functional and technical teams, the IT infrastructure and security teams, and the system integration partner in architecting, designing, implementing, and governing the SAP security framework for a large business process transformation prograbe involving an S/4 Hana implementation. The SAP security architect will also work with the Internal Audit, Risk, and Compliance teams to ensure the internal and external audit requirements are met.
Job Location
This role is a remote role based out of Atlanta, GA.
Job Responsibilities
Conduct detailed analysis and design sessions with functional teams and business
Hands-on build and test security roles, resolve defects during test cycles, support UAT, and plan and execute security related cutover activities
Architect governance processes to provision and administer security roles for SAP and connected applications
Develop Support Concept and run support and maintenance
Identify role owners and automate the role and user provisioning processes
Perform user access review and provide analysis for internal and external auditors as required
Evaluate business risks associated with security role design, implement appropriate controls to address those risks, and provide recommendations on ways to simplify and streamline the security design
Monitor, report, and remediate elevated role provisioning to ensure unauthorized access removal for live production
Ensure role provisioning and user access privileges comply with company security policies and SOX regulation
Architect, design, build, test, and maintain a centralized GRC rule sets, workflows, and approvers for user provisioning /de-provisioning, authentication/authorization/emergency access, and access recertification based on business needs, industry best practices, and regulatory requirements.
Implement and maintain a sustainable SOX concept
Lead an offshore team. Guide resources, assign tasks, and ensure their timely completion
Determine resource and capacity constraints and escalate issues to management
Manage all security related project milesontes and tasks, run task lists, assign owners, track completion
Work closely together with other project groups to stay in synch on common goals
Job Requirements
10+ years of experience in SAP application security.
2+ full life cycle SAP S/4 Hana security implementations, including greenfield implementations.
2+ GRC access control implentations on S4/Hana.
Thorough understanding of the latest S4/Hana SAP Authorization concepts.
Knowledge of information security frameworks, methodologies, policies, standards, and best practices.
Knowledge of identity and access management tools and processes.

Employment type
Full Time