Strategic Platform Administrator – SAP Administration

SAP Role Administrator

The work we do has an impact on millions of lives, and you can be a part of it. We help protect our customers against life's uncertainties. Regardless of where you work within the company, you'll be helping provide protection and peace of mind when our customers need it most.

We are seeking a self-motivated and detail-oriented SAP Role Administrator to join our IT Operations Strategic Platform Administration team. This role is responsible for the administration, governance, and lifecycle management of SAP security roles and user access, ensuring compliance with internal controls, audit requirements, and business needs.

The ideal candidate is a proactive problem solver with strong SAP security expertise, experience working within SAP GRC processes, and the ability to manage both internal stakeholders and external vendor resources to deliver high-quality role administration services.

Please note:

This position requires direct, hands-on SAP Security and Role Administration experience. General SAP functional, business analyst, or end-user experience alone does not satisfy the minimum qualifications for this role.

• 3+ years of SAP Security / Role Administration experience
• Experience with SAP GRC and Segregation of Duties (SoD) controls
• Experience with SAP user provisioning, access governance, and role management
• Experience supporting audit, compliance, and access review activities
• Experience troubleshooting SAP authorization and security access issues
• Experience working in a production enterprise SAP environment
• Applicants without direct SAP Security/Role Administration experience may not be considered for interview

Highly Preferred/Selective Qualifications:

• Experience supporting SAP FI, FSCD, or other financial SAP modules
• Experience performing User Access Reviews (UARs)
• SAP GRC certification or related SAP Security training
• Experience supporting external or internal audit activities
• Experience using Service Now or comparable access request systems
• Experience coordinating vendor resources
• Knowledge of SSO, LDAP, Active Directory, and Azure Entra
• Experience with in highly regulated or compliance-driven environments
• Candidates must be authorized to work in the United States without current or future visa sponsorship

Key Responsibilities:

SAP Security & Access Administration

• Administer SAP user access, including provisioning, modification, and de-provisioning of roles across SAP environments.
• Validate and interpret access requests to ensure proper role assignment aligned with job responsibilities and business requirements.
• Support and maintain SAP role structures, including work groups, approval workflows, and access dependencies.
• Ensure compliance with segregation of duties (SoD) policies and enterprise security standards.

Application & Role Lifecycle Management

• Manage the lifecycle of SAP roles, including design support, enhancements, testing, deployment, and retirement.
• Support application upgrades, patches, and changes impacting security roles and access models.
• Maintain alignment of SAP role strategy with business processes and IT initiatives.
• Document role administration processes, job aids, and governance standards.

Audit, Risk, & Compliance

• Coordinate and execute periodic reviews to support audit and compliance requirements.
• Support GRC processes, including firefighter (emergency access) reviews, ruleset maintenance, ownership assignments, workflows, and risk analysis activities.
• Partner with internal audit and risk teams to remediate findings and strengthen access controls.
• Maintain documentation and evidence required for internal and external audits.

Vendor Management

• Provide day-to-day oversight of resources performing SAP role administration.
• Assign and prioritize work, ensuring timely and accurate completion of access requests and role changes.
• Monitor vendor performance, quality of deliverables, and adherence to SLAs.
• Drive accountability and continuous improvement in vendor-supported processes.

Operational Support & Troubleshooting

• Provide ongoing support for SAP access-related issues, including troubleshooting role assignments and authorization errors.
• Analyze and resolve…