FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
SAP Security Engineer
CACI International Inc. Support SAP security across an IL5 S/4HANA enterprise with integrated security modules and Zero Trust design principles .
Posted 10/2/2026full-timeRemote • Illinois • United StatesMid-LevelSenior💰 $75,200 - $158,100 per yearWebsite
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in SAP Security and Basis, particularly with S/4HANA, including authorization management, GRC Access Control, and Zero Trust architecture. Proficient in implementing encryption, data governance, and compliance with DoD standards.
Highest-signal resume keywords
SAP Security ManagementGRC Access ControlSAP HANA EncryptionDoD 8140 CertificationZero Trust Architecture
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
SAP Authorization ManagementComposite RolesProfile ManagementSoD EnforcementSAP ETD IntegrationCloudHSM Key ManagementSAP-ABAC AttributesDISA STIG ImplementationISSM Approval ProcessesRole Governance Workflows
Soft Skills
CollaborationCommunication
Tools & Technologies
SAP GRCSIEM PlatformsSplunkRFC/3300HTTPS/8000OktaCyberArk PAMAWS GovCloud
Certifications & Qualifications
Interim Secret ClearanceCCSPCloud+GICSPGISFGSECSecurity+DoD 8140 Residential SAP Security Certification
Industry Keywords
IL5Data GovernanceSecure Data Lifecycle ManagementNIST 800-171NIST 800-53CORA Evidence PreparationHybrid SAP Architecture
Tech Stack
Tools & technologiesAWSCloudCyber SecuritySplunk
About the role
Key responsibilities & impact- Support SAP security across an IL5 S/4HANA enterprise with integrated security modules and Zero Trust design principles
- Develop, maintain, and optimize SAP authorization objects, composite roles, and profile management
- Execute SoD enforcement and access reviews through SAP GRC Access Control
- Integrate SAP Enterprise Threat Detection with SIEM platforms such as Splunk using LEEF syslog
- Implement and support SAP HANA AES-256 encryption at rest using PKCS#11 external key management with CloudHSM
- Manage SAP ILM processes and contribute to data governance initiatives
- Apply SAP attribute-based access control using BUKRS, KOSTL, PRCTR, WERKS, PERNR, and ORGEH
- Support SAP SSO SAML 2.0 integrations with enterprise identity providers including Okta
- Ensure secure interface communication using RFC/3300, HTTPS/8000, and related protocols
- Contribute to RMF/ATO documentation, eMASS updates, DISA STIG implementations, and CORA evidence preparation
- Support role governance workflows and ISSM approval processes
- Help shape Zero Trust architecture, strengthen system security, and support mission-critical readiness
- Collaborate across cybersecurity and audit teams
Requirements
What you’ll need- Interim Secret clearance required
- 5+ years of SAP Basis/Security experience with S/4HANA
- One or more DoD 8140-approved certifications: CCSP, Cloud+, GICSP, GISF, GSEC, or Security+
- Strong proficiency with SAP authorization concepts, composite roles, and profile management
- Hands-on SAP GRC Access Control experience, including SoD enforcement and role management
- Experience with SAP ETD and SIEM integrations
- Knowledge of SAP HANA encryption and CloudHSM-based IL5 key management
- Understanding of SAP ILM, secure data lifecycle management, and governance frameworks
- Familiarity with SAP-ABAC attributes and secure SSO integrations
- Understanding of SAP protocol security and interface hardening
- Experience with RMF/ATO processes and eMASS documentation
- Experience applying DISA STIGs to SAP environments
- Experience developing CORA evidence and supporting audit readiness
- Familiarity with NIST 800-171 / 800-53 controls
- Experience managing multi-step role governance workflows and ISSM gate approvals
- Required to travel to Scott Air Force Base quarterly
- DoD 8140 Residential SAP Security certification preferred
- Experience with AWS GovCloud IL5 environments desired
- SAP CUA and SAP SNC configuration skills desired
- Integration experience with CyberArk PAM for privileged SAP access desired
- Understanding of hybrid SAP architecture, including on-premises to AWS Direct Connect, desired
Benefits
Comp & perks- Flexible time off benefit
- Robust learning resources
- Healthcare benefits
- Wellness benefits
- Financial benefits
- Retirement benefits
- Family support benefits
- Continuing education benefits
- Time off benefits
- Competitive compensation
- Learning and development opportunities