Position: Entitlement Engineer
Duration: Long Term Contract
Location: Brazil, Chille, Colombia ,Costa Rica-LATM
Pay Range: $22/hr - $24/hr
Day to Day:
Insight Global is seeking an IAM Engineer with strong SAP GRC Access Control expertise to support identity and access governance across Tenneco / DRiV's SAP environments. This individual will manage and enhance SAP GRC capabilities across multiple landscapes, ensure access controls meet audit and compliance standards, and partner closely with security, compliance, and business stakeholders.
Specific Responsibilities:
* SAP GRC Administration:
* Manage, administer, and control SAP GRC Access Control across multiple landscapes (DEV / QA / PRD)
* GRC Configuration & Support:
* Configure, maintain, and support SAP GRC modules, including ARA, ARM, and EAM
* Troubleshoot workflow failures and access provisioning issues
* Workflow & Rules Management:
* Design, configure, and maintain BRF+ rules and MSMP workflows for access requests and approvals
* SAP Role Management:
* Perform SAP role design, build, maintenance, and remediation across SAP systems
* Support user provisioning, de-provisioning, and role changes in compliance with internal controls
* SoD & Risk Management:
* Conduct Segregation of Duties analysis, remediation, and mitigation
* Collaborate with business and application owners to resolve access risks
* Audit & Compliance Support:
* Provide access reports, logs, and audit evidence from SAP GRC
* Partner with security, audit, and compliance teams during reviews and remediation efforts
* Continuous Improvement:
* Participate in system upgrades, enhancements, and ongoing IAM/GRC process improvements
Qualifications:
* Bachelor's degree required or equivalent professional experience
* 6–7+ years of experience in IAM Engineering roles
* Strong hands-on experience with SAP GRC Access Control (implementation and production support required)
* Experience across multiple GRC landscapes (DEV / QA / PRD)
* In-depth experience with the following SAP GRC modules:
* Access Risk Analysis (ARA)
* Access Request Management (ARM)
* Emergency Access Management (EAM / Firefighter)
* Strong knowledge of BRF+ rules design and MSMP workflow configuration
* Extensive experience in SAP role design, build, remediation, and maintenance
* Single and composite roles
* SAP authorization concepts (SU24, roles, profiles)
* Experience conducting Segregation of Duties (SoD) analysis and remediation
* Proven experience supporting audits and partnering with compliance teams
* Ability to work independently and manage multiple priorities
* Experience supporting large manufacturing, automotive, or global enterprise environments
Preferred Qualifications:
* SAP Security and/or SAP GRC certifications
* Experience in large, global enterprise SAP environments
* Familiarity with additional SAP platforms and modules
* ECC, S/4HANA, Fiori Security
**Exact compensation may vary based on several factors, including skills, experience, and education.
**Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.