SAP Security Lead

Job Title: SAP Security Lead

Job Category: Security

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

CACI, Inc. has a new contract tasked to implement, support, and maintain a mission-critical SAP S/4HANA solution supporting transportation and logistics operations for the Department of Defense. The CACI Team manages Planning, Procurement, Fulfillment, Financials, Application Development, and Technical Operations-including Security, GRC, and Identity & Access Management-within the Joint Transportation Management System (JTMS) environment.

CACI is seeking to hire an SAP Security / GRC Lead responsible for architecting, implementing, and governing SAP Security, SAP GRC Access Control, and compliance processes across the JTMS landscape. This role supports the deployment of SAP S/4HANA Private Cloud Edition (PCE) through RISE with SAP in SAP NS2, ensuring adherence to DoD cybersecurity standards and secure cloud operations.

This position includes working closely with Professional Services teams, Solution Architects, Cloud Architects, Basis Administrators, Application Developers, Business Process Analysts, and cybersecurity organizations. The role includes direct engagement with customers, program sponsors, auditors, and security stakeholders.

Responsibilities:

The JTMS solution is foundational to the DoD mission, enabling the fielding and sustainment of transportation, logistics, and financial operations.

As the SAP Security / GRC Lead, you will:

• Lead the design and implementation of SAP Security across S/4HANA, Fiori, and the SAP NS2 Private Cloud Edition landscape.
• Develop the SAP security architecture and ensure alignment with DoD cybersecurity, RMF, STIGs, and NIST 800-53 controls.
• Own the identity and access management strategy, including business role design, authorization concepts, and user provisioning processes.
• Lead implementation and ongoing use of SAP GRC Access Control (ARA, EAM, BRM, ARM).
• Define and maintain USTRANSCOM-specific Segregation of Duties (SoD) rulesets and automated risk analyses.
• Coordinate with SAP NS2 teams to support secure operations, boundary protections, patching, and compliance requirements.
• Support security readiness activities, compliance assessments, vulnerability mitigation, and ATO documentation.
• Guide security design through project phases including blueprinting, build, testing, cutover, deployment, and sustainment.
• Provide consultative guidance on SAP Security and GRC best practices to internal teams and government stakeholders.
• Manage and mentor SAP security analysts supporting daily operations and project delivery.

In this role you will work on Application Security, Compliance, and Delivery in the following areas:

• SAP S/4HANA Security and GRC implementation
• Role design and authorization management across Fiori and ABAP stacks
• SAP GRC Access Control configuration, rulesets, workflows, and Firefighter
• Identity integration with CAC/PIV, Azure AD, EAMS-A, or other DoD providers
• SAP NS2 PCE security architecture alignment and cloud governance
• Monitoring and remediation of SoD risks and access violations
• Security compliance management and audit support (RMF, STIGs, NIST)
• Continuous monitoring, vulnerability assessments, POA&M updates
• Incident management, root-cause analysis, and access troubleshooting
• Support for cutover, transports, migrations, and security configuration readiness
• Collaboration with SAP, NS2, and supporting vendors to maintain secure operations
• Development and maintenance of process and security documentation, including security architecture, SOPs, and provisioning workflows
• Providing expert advice on SAP security operations, design patterns, and GRC best practices

Qualifications:

Required:

• Active DoD Secret security clearance
• 15+ years of SAP Security experience in large, complex SAP programs
• 10+ years SAP GRC Access Control experience (ARA, BRM, EAM, ARM)
• Expertise in SAP authorization concepts, role design, and access governance
• Experience securing SAP S/4HANA systems, including Fiori and ABAP
• Strong knowledge of DoD cybersecurity frameworks: RMF, NIST 800-53, DISA STIGs
• Experience supporting SAP in secure cloud environments (RISE, PCE, NS2, or similar)
• Understanding of SAP system architecture, landscapes, and technical components
• Ability to collaborate with technical and functional teams to drive secure design
• Strong written and verbal communication skills with the ability to brief senior leadership
• Ability to independently manage complex security requirements and priorities

Desired:

• Experience working on Federal or DoD SAP programs
• SAP NS2 or RISE with SAP cloud security experience
• Experience with SAP BTP, IAS/IPS, identity federation, and SSO integration
• SAP certification in Security, GRC, or S/4HANA
• Technical degree with relevant field experience
• Experience with tools such as ServiceNow, MS SharePoint, gCTS, Avantra, or DoD enterprise IdAM systems
• SAP HANA security knowledge (privileges, schemas, encryption)
• TS/SCI clearance (highly preferred)

-
_________________________________________________________________________

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Your potential is limitless. So is ours.

_________________________________________________________________________

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:
$105,100-$231,100

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.