Software Engineer 2

About the Role

Responsibilities

• ● Handle SAP security architecture and design to protect data and systems from unauthorized access and ensure compliance with Microsoft standards and applicable regulatory requirements.
• ● Define, implement, monitor, and enforce security requirements, controls, and authorization designs across SAP platforms and integrated services.
• ● Develop scalable SAP roles and authorizations aligned with least-privilege principles, industry best practices, and Microsoft policies.
• ● Stay current with emerging SAP security threats, security technologies, and industry practices relevant to Microsoft's technology roadmap.
• ● Partner with engineering, business, compliance, and operations teams to communicate security requirements and provide recommendations for SAP integration points.
• ● Proactively identify changes in the SAP threat landscape and lead timely risk assessment and remediation activities.
• ● Ensure project teams incorporate and document security, privacy, and compliance requirements throughout Microsoft's development lifecycle, including ITLC.
• ● Create and maintain complete, consistent, and audit-ready SAP security architecture, administration procedures, standards, and guidelines.
• ● Lead security workstreams through design, development, testing, deployment, and operational readiness while meeting project scope, quality, and schedule commitments.
• ● Estimate security work, define milestones and deliverables, manage dependencies, and communicate risks and progress to stakeholders.
• ● Support the annual security and privacy program by developing and maintaining security standards and procedures for SAP and connected systems.
• ● Resolve complex and escalated security issues through structured investigation, stakeholder coordination, and sustainable corrective actions.
• ● Provide technical thought leadership, coaching, and guidance to team members, engineering partners, and management.

Requirements

• ● 5+ years of experience in SAP security across technologies such as SAP NetWeaver, S/4HANA, SAP HCM, MDG, BIS, and cloud services including SAP BTP, SuccessFactors, Ariba, or IBP, with deep knowledge of SAP authorization concepts.
• ● 3+ years of experience with SAP Governance, Risk, and Compliance tools and capabilities.
• ● 3+ years of experience implementing security controls for regulatory and privacy requirements such as SOX, protection of personally identifiable information, GDPR, DORA, and international access restrictions.
• ● 3+ years of experience managing Segregation of Duties risks, business-process conflicts, and mitigating controls.
• ● Strong knowledge of information-security baselines, risk-management frameworks, and security standards.
• ● Working knowledge of security concepts for servers, networks, cloud platforms, logging, and monitoring.
• ● Understanding of at least one major business-process domain, such as Finance, Human Resources, or Supply Chain Management.
• ● Bachelor's degree in Business, Computer Science, Management Information Systems, or a related field, or equivalent practical experience.