Job Title: SAP IAG Consultant (SAP Security & GRC) Location: 100% Remote (Occasional travel to Denver, CO) Employment Type: Contract-to-Hire (CTH) Contract Duration: 3–6 Months, followed by Full-Time Conversion

Job Description

We are seeking an experienced SAP Identity Access Governance (IAG) Consultant with strong hands-on experience in SAP IAG, SAP GRC Access Control, and SAP Security. The consultant will support a cloud-based identity and access governance initiative, helping modernize traditional SAP GRC Access Control processes.

Key Responsibilities

Configure and support SAP Cloud Identity Access Governance (IAG) solutions. Manage Access Request Service (ARS), including access requests, approval workflows, and user provisioning. Configure Role Design Service (RDS) for business roles and Role-Based Access Control (RBAC). Support Access Certification Service (ACS) for periodic user access reviews and compliance. Manage Privileged Access Management (PAM), including firefighter access and audit monitoring. Perform Segregation of Duties (SoD) analysis, risk assessments, and access compliance reporting. Support integration between SAP IAG, SAP systems, and non-SAP applications. Troubleshoot access-related issues and support security governance improvements. Required Skills 4+ years of experience in SAP GRC Access Control and/or SAP IAG. Hands-on experience with SAP IAG services: ARS, RDS, ACS, and PAM. Strong knowledge of SAP Security, roles, authorizations, and user provisioning. Experience with SoD, RBAC, access risk analysis, and compliance controls. Experience integrating SAP and non-SAP systems. Strong troubleshooting, communication, and stakeholder management skills. Preferred Skills Experience implementing or migrating from SAP GRC Access Control to SAP Cloud IAG. Experience with SAP S/4HANA or ECC security. Knowledge of SAP Cloud Identity Services (IAS/IPS). Experience supporting security audits and compliance initiatives. Aspire IT Solutions is an equal opportunity employer. All applicants must submit accurate information; misrepresentation may disqualify candidacy. This role may require background checks/work authorization verification. Rate/benefits are negotiable. Aspire IT Solutions reserves the right to modify or withdraw this posting.