SAP IAG Consultant

Job Title: SAP IAG Consultant (SAP Security & GRC)
Location: 100% Remote (Occasional travel to Denver, CO)
Employment Type: Contract-to-Hire (CTH)
Contract Duration: 3–6 Months, followed by Full-Time Conversion

Job Description
We are seeking an experienced SAP Identity Access Governance (IAG) Consultant with strong hands-on experience in SAP IAG, SAP GRC Access Control, and SAP Security.

The consultant will support a cloud-based identity and access governance initiative, helping modernize traditional SAP GRC Access Control processes.

Key Responsibilities

• Configure and support SAP Cloud Identity Access Governance (IAG) solutions.
• Manage Access Request Service (ARS), including access requests, approval workflows, and user provisioning.
• Configure Role Design Service (RDS) for business roles and Role-Based Access Control (RBAC).
• Support Access Certification Service (ACS) for periodic user access reviews and compliance.
• Manage Privileged Access Management (PAM), including firefighter access and audit monitoring.
• Perform Segregation of Duties (SoD) analysis, risk assessments, and access compliance reporting.
• Support integration between SAP IAG, SAP systems, and non-SAP applications.
• Troubleshoot access-related issues and support security governance improvements.

Required Skills

• 4+ years of experience in SAP GRC Access Control and/or SAP IAG.
• Hands-on experience with SAP IAG services: ARS, RDS, ACS, and PAM.
• Strong knowledge of SAP Security, roles, authorizations, and user provisioning.
• Experience with SoD, RBAC, access risk analysis, and compliance controls.
• Experience integrating SAP and non-SAP systems.
• Strong troubleshooting, communication, and stakeholder management skills.

Preferred Skills

• Experience implementing or migrating from SAP GRC Access Control to SAP Cloud IAG.
• Experience with SAP S/4HANA or ECC security.