Lead Cyber Security Engineer (Onsite)
Core
Architecting secure integrations for SAP's Joule AI capabilities and managing enterprise Identity and Access Management (IAM) for SAP and Workday systems.
Role type
Senior IC SAP Security & Platform Security Engineer
Builds
Secure AI enablement for SAP Joule, unified Segregation of Duties (SoD) frameworks, and enterprise Privileged Access Management (PAM) workflows.
Domain
Enterprise Security, Identity Management, SAP GRC, Workday Security, AI Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
SAP Security & GRC expertise, Workday security configuration, Privileged Access Management (PAM) operations, Cross application Segregation of Duties (SoD) analysis, AI security controls, Identity federation protocols, Emergency Access Management (Firefighter) governance, Risk assessment and remediation planning, IAM roadmap planning, SIEM integration
Preferred skills
CISSP, CISM, CISA, SAP Security/GRC, Workday Security certifications, SAP S/4HANA, Ariba, Concur, Fieldglass authorization knowledge, Responsible AI governance principles
Technologies
SAP GRC, SAP IAG, Workday, SAP Joule, IAS/IPS, SCIM/IPS, OIDC, SAML, OAuth 2.0, SIEM platforms
Responsibilities
Lead redesign and governance of SAP Emergency Access Management (Firefighter), Architect secure end-to-end SAP security for Business AI/Joule, Implement core AI security controls aligned with Responsible AI principles, Establish a unified cross application Segregation of Duties (SoD) framework, Lead SoD and access risk remediation efforts, Integrate SAP and Workday privileged access requirements into the enterprise PAM framework, Lead Workday security architecture, Oversee enterprise access governance including periodic access reviews, Act as primary liaison across IT Security, HRIS, Audit, Compliance, and business stakeholders, Conduct audits, risk assessments, and remediation planning
Seniority
Senior, hands-on IC
