SAP Security Engineer

Job not on LinkedIn

🔥 4 minutes ago

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $75.2k - $158.1k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CACI International Inc

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1962

🎖️ Defense

🏛️ Government

🔒 Cybersecurity

🔥 Funding within the last year

💰 $500M Post-IPO Debt on 2026-02

Defense • Government • Cybersecurity

CACI International Inc is a U. S. -based government contractor that provides technologies and professional services to national security, defense, and federal civilian customers. CACI delivers solutions across cyber and digital operations, enterprise IT modernization, electronic warfare, counter-unmanned systems (C-UxS), space and optical communications, agile DevSecOps software development, and mission engineering and logistics support. The company positions itself as a large prime contractor that uses advanced software, analytics, sensing, and hardware to detect and counter evolving threats and modernize government technology architectures.

📋 Description

• Support SAP security across an IL5 S/4HANA enterprise with integrated security modules and Zero Trust design principles • Develop, maintain, and optimize SAP authorization objects, composite roles, and profile management • Execute SoD enforcement and access reviews through SAP GRC Access Control • Integrate SAP Enterprise Threat Detection with SIEM platforms such as Splunk using LEEF syslog • Implement and support SAP HANA AES-256 encryption at rest using PKCS#11 external key management with CloudHSM • Manage SAP ILM processes and contribute to data governance initiatives • Apply SAP attribute-based access control using BUKRS, KOSTL, PRCTR, WERKS, PERNR, and ORGEH • Support SAP SSO SAML 2.0 integrations with enterprise identity providers including Okta • Ensure secure interface communication using RFC/3300, HTTPS/8000, and related protocols • Contribute to RMF/ATO documentation, eMASS updates, DISA STIG implementations, and CORA evidence preparation • Support role governance workflows and ISSM approval processes • Help shape Zero Trust architecture, strengthen system security, and support mission-critical readiness • Collaborate across cybersecurity and audit teams

🎯 Requirements

• Interim Secret clearance required • 5+ years of SAP Basis/Security experience with S/4HANA • One or more DoD 8140-approved certifications: CCSP, Cloud+, GICSP, GISF, GSEC, or Security+ • Strong proficiency with SAP authorization concepts, composite roles, and profile management • Hands-on SAP GRC Access Control experience, including SoD enforcement and role management • Experience with SAP ETD and SIEM integrations • Knowledge of SAP HANA encryption and CloudHSM-based IL5 key management • Understanding of SAP ILM, secure data lifecycle management, and governance frameworks • Familiarity with SAP-ABAC attributes and secure SSO integrations • Understanding of SAP protocol security and interface hardening • Experience with RMF/ATO processes and eMASS documentation • Experience applying DISA STIGs to SAP environments • Experience developing CORA evidence and supporting audit readiness • Familiarity with NIST 800-171 / 800-53 controls • Experience managing multi-step role governance workflows and ISSM gate approvals • Required to travel to Scott Air Force Base quarterly • DoD 8140 Residential SAP Security certification preferred • Experience with AWS GovCloud IL5 environments desired • SAP CUA and SAP SNC configuration skills desired • Integration experience with CyberArk PAM for privileged SAP access desired • Understanding of hybrid SAP architecture, including on-premises to AWS Direct Connect, desired

🏖️ Benefits

• Flexible time off benefit • Robust learning resources • Healthcare benefits • Wellness benefits • Financial benefits • Retirement benefits • Family support benefits • Continuing education benefits • Time off benefits • Competitive compensation • Learning and development opportunities