Senior Security & Authorization Engineer (SAP S/4 & SAP BTP)

About the role

We are looking for a Senior Security & Authorization Engineer to design, develop and maintain robust authorization concepts for SAP S/4HANA and SAP Business Technology Platform (BTP). You will work closely with the CORE S/4HANA Program to embed security requirements into release cycles while ensuring compliance with regulated standards such as GxP and ICS/GISC.

Key responsibilities

• Design and maintain role structures and authorization concepts for SAP S/4HANA and SAP BTP.
• Lead the full lifecycle of SAP roles, from requirement gathering to testing and ongoing maintenance.
• Manage user administration processes and continuously improve authorization procedures.
• Collaborate with the Security & Authorization Team to integrate requirements into program initiatives.
• Administer identity management using SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW, and Pathlock Cloud.
• Support compliance activities, security assessments and audits focusing on segregation of duties (SoD).
• Provide expertise and serve as the primary contact for role‑design inquiries across IT and business teams.
• Leverage AI‑powered tools (ChatGPT, Claude, Copilot) to enhance delivery quality and efficiency.

Required profile

• Bachelor’s degree in Computer Science, IT or related field, or equivalent experience.
• 8+ years of SAP Security & Authorization experience, preferably in a regulated environment.
• Strong knowledge of SAP authorization concepts, role design methodologies and best practices.
• Experience with compliance frameworks (GxP, ICS/GISC, SoD) and Agile/DevOps methodologies.
• Excellent problem‑solving and communication skills; fluency in English required.

Required skills

• SAP S/4HANA
• SAP Business Technology Platform (BTP)
• SAP Cloud Identity Services (IAS/IPS)
• SailPoint IDNOW
• Pathlock Cloud
• AI‑powered tools (ChatGPT, Claude, Copilot)
• DevOps practices
• Agile methodologies