Intermediate SAP Security Analyst

Location: Oshawa, ON, CA, L1H 8W8

Req ID: 56612

Status: Permanent Full Time

Working Conditions : Hybrid

Education Level: A 4 year university degree in Computer Science, Software Engineering.

Base Location: Oshawa, ON

Shift: Days

Travel: 10%

Deadline to Apply: July 1, 2026

Salary Range: $1,764.34 - 2,663.56 Per Week

Electrify your career and help build a brighter tomorrow.

Every generation has a challenge that defines them. At OPG, we are calling on all innovators, disruptors, thought leaders and change-makers. Join us as we work to electrify life in one generation and build a sustainable future powered by our electricity, our ideas, and our people. Join OPG and make history.

Whether you work in the skilled trades or are a business professional, a career at OPG is an opportunity to electrify your life on - and off - the job.

JOB OVERVIEW

Ontario Power Generation (OPG) is looking for a dynamic, strategic and results-driven professional to join our team in the role of Intermediate SAP Security Analyst .

Reporting to the Manager, IT Product Delivery, this position is responsible to partner with business, compliance, and technical teams to deliver secure access, maintain strong controls, and support audit-ready processes while enabling delivery teams during implementations and releases.

We are seeking an Intermediate SAP Security Analyst to support day-to-day and project-based security needs across a hybrid SAP landscape, including SAP S/4HANA, SAP ECC, SAP BTP, SAP Cloud ALM, BDC, and governance solutions such as SAP GRC and SAP IAG.

KEY ACCOUNTABILITIES

• Access Management & Operational Support - Provide security administration and support for SAP S/4HANA and SAP ECC, including user provisioning, role updates, access troubleshooting, and issue resolution.
• Support end-to-end access processes: request intake, approvals, provisioning, validation, and periodic reviews. Diagnose and resolve authorization issues (e.g., missing authorizations, role conflicts, user master problems) and recommend sustainable fixes.
• Role Design, Build, and Maintenance - Assist in designing and maintaining role-based access using least-privilege principles and standardized naming/documentation.
• Perform role updates and remediation activities aligned to business requirements, compliance controls, and segregation of duties (SoD). Support role testing for projects/releases, including test user setup, role validation, and defect triage.
• SAP BTP, Cloud, and Identity Enablement - Support security needs across SAP BTP, including role collections, app access, and environment-specific security configurations (as applicable).
• Assist with identity and authentication integrations (e.g., SSO, OAuth/SAML concepts) in collaboration with IAM and platform teams. Support security for SAP cloud services such as SAP Cloud ALM and BDC (as applicable), including access setup and ongoing maintenance.
• Governance, Risk & Compliance (GRC / IAG) - Support GRC/IAG processes such as access risk analysis, SoD checks, provisioning workflows, firefighter/emergency access (if applicable), and audit reporting.
• Project & Release Support - Support project teams during S/4HANA initiatives (implementations, rollouts, enhancements), including security design input and cutover/hypercare support.
• Collaborate with Basis, development, functional, and integration teams to ensure security requirements are built into solution delivery. Contribute to security documentation: role catalogs, access matrices, procedures, and runbooks.

QUALIFICATIONS

• Requires a 4-year university degree in Computer Science, Software Engineering, and minimum of over 4 years and up to and including 6 years is considered necessary to gain this experience.
• Requires eexperience in SAP security/authorizations supporting SAP S/4HANA and/or SAP ECC.
• Requires working experience supporting a multi-system SAP landscape with exposure to: BTP, BDC, Cloud ALM, GRC, and/or IAG.
• Requires practical experience with SAP authorization concepts (roles, profiles/authorizations, user administration, troubleshooting).
• Requires understanding of Segregation of Duties (SoD) principles and access governance controls.
• Requires strong communication skills with the ability to work effectively with business users, technical teams, and auditors.
• Requires strong organizational skills-able to manage multiple access requests, incidents, and project tasks concurrently.
• Requires hands-on experience with SAP IAG and/or SAP GRC Access Control (ARA, BRM, EAM/Firefighter, workflows).

The successful candidate will exhibit uncompromising integrity and commitment to upholding corporate values, and the OPG Code of Business Conduct.

OPG is committed to fostering an inclusive, equitable, and accessible environment. If you require accommodation during the selection process, please contact View email address on ca.snapjobsearch.com

What makes a career at OPG different?

With operations across Ontario, OPG is one of the most diverse power producers in North America. As the largest generator in Ontario, we meet approximately 50% of the province’s electricity needs, largely from low-carbon sources like nuclear and hydro.

As we work to achieve our vision of Electrifying life in one generation, OPG and our family of companies are also helping advance the development of new low-carbon technologies such as Small Modular Reactors (SMRs), refurbishment projects, and electrification initiatives to help power the growing demands of a growing economy. Join OPG and make history.

Please submit your application online at OPG thanks all those who apply; however, only candidates considered for an interview will be contacted.

#LI-Hybrid

Please note: All job postings at OPG are to fill existing vacancies within our organization.

OPG may use artificial intelligence (AI) tools as part of the applicant screening process. However, applications will also be reviewed by a member of our Recruitment team to ensure a fair and thorough assessment.

The base salary range considers many factors including, but not limited to experience, education, and training, including any collective agreement requirements for union represented positions. It is not typical for the salary to be offered near the top of the range, and salary is dependent on numerous factors. For management roles, the base salary range does not represent the total compensation package. The total compensation package for regular full-time management roles includes pay-for-performance programs for annual and medium time periods. Maintaining a high-performance culture and excellence is a core expectation of every member of our leadership team and is rewarded through the established compensation framework.

OPG is committed to employment equity. As such, we encourage applicants from equity-seeking communities (Indigenous Peoples, racialized persons, persons with disabilities, and women). We strongly believe that alleviating the under-representation of equity-seeking individuals will create a stronger OPG team and allow us to better serve the needs of our diverse communities.

In order to fulfill the above-mentioned purpose, priority in hiring may be given to qualified persons who self-identify as a member of equity-seeking groups as identified in the application process. This initiative constitutes a special program under the Human Rights Code/Canadian Human Rights Act.