Strategic Platform Administrator - SAP Role Administration

About the role

Protective is hiring an SAP Role Administrator to manage security, governance, and user access within our IT operations. You will oversee the full lifecycle of SAP roles while ensuring our systems meet strict compliance and audit standards. This position requires a candidate who can balance technical security tasks with the coordination of vendor resources.

Key facts

What you'll do

• Provision, modify, and remove user access across all SAP environments.
• Design, test, deploy, and retire SAP roles while supporting system upgrades and patches.
• Manage SAP GRC processes, including emergency access reviews, risk analysis, and workflow maintenance.
• Coordinate with internal audit and risk departments to address findings and improve access controls.
• Oversee daily tasks performed by external vendors, ensuring quality and adherence to service level agreements.
• Troubleshoot authorization errors and resolve access-related issues for business users.
• Document governance standards, role administration procedures, and training materials.

Requirements

• Bachelor degree in a technical field or equivalent professional experience.
• Minimum of 3 years of hands-on experience in SAP Security and Role Administration.
• Proven experience with SAP GRC, Segregation of Duties controls, and user provisioning.
• Experience supporting audit, compliance, and access review activities.
• Demonstrated ability to resolve complex SAP authorization and security issues.
• Experience working within a production enterprise SAP environment.
• Note: General functional or end-user experience does not qualify for this role.

Nice to have

• Experience with SAP FI, FSCD, or other financial modules.
• Proficiency in performing User Access Reviews.
• SAP GRC certification or specialized SAP security training.
• Experience using ServiceNow or similar request management platforms.
• Background in coordinating vendor resources.
• Knowledge of SSO, LDAP, Active Directory, and Azure Entra ID.
• Experience working in highly regulated or compliance-driven industries.

Skills & tools

• SAP Security and Role Administration
• SAP GRC
• Segregation of Duties (SoD)
• Access Governance
• Vendor Management
• Audit and Compliance Support

Practical notes

• Candidates must be authorized to work in the United States without current or future visa sponsorship.
• Benefits include health, dental, and vision insurance, mental health support, paid time off, parental leave, short-term disability, and a cultural observance day.
• Financial benefits include a pension plan, 401(k) with company matching, and contributions to healthcare accounts.
• Employees may participate in ProHealth Rewards to earn cash incentives for wellbeing activities.
• Applicants requiring a disability-related accommodation for the recruitment process should contact eric.hess@protective.com.