IT Solutions Architect- SAP Security

Job Overview

The IT Solutions Architect – SAP Security is responsible for leading technical designing and implementing a scalable, business aligned role-based access control strategy across SAP. This role aligns with internal security teams to ensure guardrails and consistently across modules and co-creates role-based definitions and definitions.

• Designs defines and governs a scalable, clearly defined role-based process that includes naming conventions, role ownership model, authorization concepts and role design standards
• Leads security design in partnership with cybersecurity teams that follows security principles while balancing business productivity
• Owns and advises on end to end security design for SAP tools, maps business processes and job functions that allows for backend authorization and Odata service access
• Partners with Basis and platform teams to ensure system configuration and effective user access
• Designs and governs segregation of duties (SoD) rules and controls, leveraging SAP GRC Access controls
• Manages emergency and privileged access processes including monitoring approvals and reporting
• Establishes scalable standards for role assignment, approval, access review audits, and role recertification
• Partner with IAM teams to integrate SAP security with enterprise identity platforms (e.g., Azure AD / Entra , SailPoint, Okta) and drive provisioning automation

• Lead technical strategy through technical advisory skills and coaching
• Performs other duties as assigned.

• Bachelor’s degree in engineering, Computer Science, Systems Analysis, or a related field preferred.
• SAP Certifications such as System Administration or Architecture preferred

• 7+ years of experience in SAP with at least 2 years in Solutions Architecture or lead for SAP Security implementation
• Proven experience in designing and implementing large SAP projects in large-scale enterprise environment
• Strong hands-on expertise with PFCG, authorization objects, org levels, and role design
• Experience in deployment in complex on-premise and hybrid environment
• Experience in supply chain industry a plus

• Strong stakeholder management and communication skills.
• Strong collaboration and relationship building skills
• Knowledge of SAP integrations, RFC security, and technical user governance.
• Ability to translate business requirements into secure, scalable SAP access models.
• Good judgment is required for this position as there may be times when direct supervision may not be immediately available.

This position is classified as remote where the associate will perform remote work from their primary residence. Remote associates are welcome to work from the office but are not required to do so. While remote associates are not required to work from an office on a regular basis, they may be required to come to the office or other UNFI locations for necessary business reasons or if directed to do so by their manager.

Office Roles:

• Most work is performed in a temperature-controlled office environment.
• Incumbent may sit for long periods of time at a desk or computer terminal.
• While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, or feel; reach with hands and arms; and talk or hear.
• Incumbent may use calculators, keyboards, telephones, and other office equipment in the course of a normal workday.
• Stooping, bending, twisting, and reaching may be required in the completion of job duties.

The above statements are intended to describe the general nature of the work performed by the employees assigned to this job. All employees must comply with Company policy and applicable laws. The responsibilities, duties and skills required of personnel so classified may vary within each department and/or location.