Johnson Technology Systems, Inc. (JTSi) · 4 months ago
SAP Security SME – Dynamic Authorization, Fortify & Cloud Migration
Johnson Technology Systems, Inc. (JTSi) is a federal government consulting firm providing technical services to the Federal Government. They are seeking a cleared SAP Security Subject Matter Expert with expertise in SAP Dynamic Authorization, Fortify, and cloud migration to lead secure migrations of SAP security solutions to cloud platforms.
Business DevelopmentConsultingEnterprise Resource Planning (ERP)Information TechnologyIT ManagementManagement ConsultingSoftware
Responsibilities
Design, configure, and manage SAP Dynamic Authorization Management (DAM/ABAC) solutions across ECC, S/4HANA, BW, EWM, and Fiori environments
Lead the migration of SAP security and Fortify solutions to cloud platforms (AWS, NS2 cloud)
Integrate dynamic authorization with SAP GRC, Identity Access Governance (IAG), Identity Authentication Service (IAS), and hybrid landscapes
Perform SAP Fortify static code scans on ABAP/Java developments, analyze vulnerabilities, and provide remediation guidance
Ensure secure coding standards are enforced across development and migration projects
Support cloud security hardening (SNC, SSO, TLS/SSL, encryption, certificates, key management)
Collaborate with Basis, Development, and Cloud teams to ensure seamless migration of roles, profiles, and authorizations during system moves
Conduct security risk assessments and ensure compliance with federal and DoD frameworks (NIST, FISMA, STIGs, GDPR)
Provide audit support and ensure full compliance during and after cloud migration activities
Develop playbooks, documentation, and best practices for SAP security in hybrid and cloud landscapes
Qualification
Required
Active [Secret / Top Secret] clearance
Proven experience with SAP Dynamic Authorization (DAM/ABAC) and SAP Fortify application security testing
Hands-on expertise in SAP security migrations to cloud (SAP BTP, Azure, AWS, or GCP)
Deep knowledge of SAP role design, profiles, SU24, PFCG, and authorization objects
Strong understanding of DevSecOps pipelines and integrating Fortify into CI/CD
Experience with SAP GRC, SAP IAG/IAS, and S/4HANA security
Strong background in federal compliance frameworks (NIST, FISMA, DoD STIGs, SOX)
Excellent problem-solving, communication, and documentation skills
Preferred
SAP Certified in Security, GRC, or S/4HANA
Prior experience with federal cloud migrations (IL4, IL5, FedRAMP environments)
Familiarity with Zero Trust security frameworks in SAP landscapes
Experience with hybrid SAP landscapes (Cloud to Cloud)
Company
Johnson Technology Systems, Inc. (JTSi)
Established in 2003, JTSi is an IT & Engineering Services provider with years of documented experience in the Information Technology and Engineering services field.
Funding
Current Stage
Growth StageCompany data provided by crunchbase