SAP Security Lead Architect; Onshore

Position Summary:BCTG's direct client is seeking a seasoned SAP Security Lead Architect to oversee the end-to-end security design, architecture, and implementation for a large-scale SAP RISE Private Cloud program. This role will own the security strategy, ensure alignment with leading practices, and guide project teams through all phases of deployment. The role will operate remotely with limited travel to the client's US headquarters.

• Lead the overall SAP security architecture for RISE/Private Cloud, including identity management, role design, access control, and compliance frameworks.

• Define and implement role‑based access strategies
  , segregation of duties (SoD), and security governance processes.

• Partner with BASIS, Infrastructure, and SAP RISE teams to ensure secure cloud provisioning, authentication, network segmentation, and system hardening.

• Drive security blueprinting workshops and translate business/functional requirements into secure design specifications.

• Oversee the creation and testing of PFCG roles, Fiori catalogs/groups, and cross‑system access requirements (ECC → S/4, BTP, CPI, Ariba, Success Factors, etc.).

• Lead Security cutover, go‑live readiness, and hypercare support.

• Ensure compliance with internal controls and regulatory requirements (SOX, GDPR, industry‑specific guidelines).

• Serve as the primary point of contact for all security‑related topics across program leadership, technical teams, and audit/compliance stakeholders.

• 15+ years of SAP security experience with deep expertise in S/4
  
  HANA and related cloud platforms.

• Hands‑on leadership in RISE/Private Cloud architecture and implementation.

• Strong understanding of identity management, authentication technologies (Azure AD, OAuth, SAML), and SAP GRC Access Control.

• Demonstrated success leading cross‑functional security work streams in complex global landscapes.

• Experience with SAP Fiori security, BTP security, and integration layer security.

• Excellent communication and stakeholder management skills.

• Ability to proactively shape security standards, challenge assumptions, and drive best‑practice design.

• Comfortable leading architecture sessions, producing deliverables, and coaching client resources.