SAP Security Lead

Job Title:

SAP Security Lead Job Category:
Security Time Type:
Full time Minimum Clearance Required to Start:
Secret Employee Type:
Regular Percentage of

Travel Required:

Up to 10%
Type of Travel:
Continental US* * *

CACI, Inc. has a new contract tasked to implement, support, and maintain a mission‑critical SAP S/4

HANA solution supporting transportation and logistics operations for the Department of Defense. The CACI Team manages Planning, Procurement, Fulfillment, Financials, Application Development, and Technical Operations—including Security, GRC, and Identity & Access Management—within the Joint Transportation Management System (JTMS) environment.

CACI is seeking to hire an SAP Security / GRC Lead responsible for architecting, implementing, and governing SAP Security, SAP GRC Access Control, and compliance processes across the JTMS landscape. This role supports the deployment of SAP S/4

HANA Private Cloud Edition (PCE) through RISE with SAP in SAP NS2, ensuring adherence to DoD cybersecurity standards and secure cloud operations.

This position includes working closely with Professional Services teams, Solution Architects, Cloud Architects, Basis Administrators, Application Developers, Business Process Analysts, and cybersecurity organizations. The role includes direct engagement with customers, program sponsors, auditors, and security stakeholders.

The JTMS solution is foundational to the DoD mission, enabling the fielding and sustainment of transportation, logistics, and financial operations.

• Lead the design and implementation of SAP Security across S/4
  
  HANA, Fiori, and the SAP NS2 Private Cloud Edition landscape.
• Develop the SAP security architecture and ensure alignment with DoD cybersecurity, RMF, STIGs, and NIST 800-53 controls.
• Own the identity and access management strategy, including business role design, authorization concepts, and user provisioning processes.
• Lead implementation and ongoing use of SAP GRC Access Control (ARA, EAM, BRM, ARM).
• Define and maintain USTRANSCOM‑specific Segregation of Duties (SoD) rulesets and automated risk analyses.
• Coordinate with SAP NS2 teams to support secure operations, boundary protections, patching, and compliance requirements.
• Support security readiness activities, compliance assessments, vulnerability mitigation, and ATO documentation.
• Guide security design through project phases including blueprinting, build, testing, cutover, deployment, and sustainment.
• Provide consultative guidance on SAP Security and GRC best practices to internal teams and government stakeholders.
• Manage and mentor SAP security analysts supporting daily operations and project delivery.

In this role you will work on Application Security, Compliance, and Delivery in the following areas:

• SAP S/4
  
  HANA Security and GRC implementation
• Role design and authorization management across Fiori and ABAP stacks
• SAP GRC Access Control configuration, rulesets, workflows, and Firefighter
• Identity integration with CAC/PIV, Azure AD, EAMS‑A, or other DoD providers
• SAP NS2 PCE security architecture alignment and cloud governance
• Monitoring and remediation of SoD risks and access violations
• Security compliance management and audit support (RMF, STIGs, NIST)
• Continuous monitoring, vulnerability assessments, POA&M updates
• Incident management, root‑cause analysis, and access troubleshooting
• Support for cutover, transports, migrations, and security configuration readiness
• Collaboration with SAP, NS2, and supporting vendors to maintain secure operations
• Development and maintenance of process and security documentation, including security architecture, SOPs, and provisioning workflows
• Providing expert advice on SAP security operations, design patterns, and GRC best practices

Required:

• Active DoD Secret security clearance
• 15+ years of SAP Security experience in large, complex SAP programs
• 10+ years SAP GRC Access Control experience (ARA, BRM, EAM, ARM)
• Expertise in SAP authorization concepts, role design, and access governance
• Experience securing SAP S/4
  
  HANA systems, including Fiori and ABAP
• Strong knowledge of DoD cybersecurity frameworks: RMF, NIST 800-53, DISA STIGs
• Experience supporting SAP in secure…