Senior Security & Authorization Engineer (SAP S/4 & SAP BTP)

About the role

Bayer is looking for a Senior Security & Authorization Engineer to design, develop and maintain authorization concepts and role structures in SAP S/4HANA and SAP BTP, aligned with business needs and compliance standards such as GxP, ICS/GISC and segregation of duties. The role works closely with the CORE S/4HANA Program and its Security & Authorization Team.

Key responsibilities

• Lead the end-to-end lifecycle of SAP roles, from requirements gathering and concept design through build, testing and ongoing maintenance.
• Manage and continuously improve user administration and authorization procedures in SAP S/4HANA and SAP BTP.
• Administer and develop identity management processes using SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW and Pathlock Cloud.
• Support compliance and governance activities, including security assessments and audits, focusing on authorization risks and segregation of duties.
• Act as a key point of contact for authorization and role design questions across IT Operations and business teams.
• Stay current on SAP BTP and S/4HANA authorization best practices, including embedded AI capabilities, and use AI-powered tools to improve delivery quality and efficiency.

Required profile

• Bachelor's degree in computer science, information technology or a related field, or equivalent work experience.
• 8+ years of experience in SAP Security & Authorization, with a strong focus on role design and authorization concepts in SAP S/4HANA and SAP BTP, ideally in a regulated (GxP) environment.
• Experience with DevOps and Agile methodologies.
• Fluent English required; Portuguese and German are an advantage.
• Security certifications (CISSP, CISM, CISA) are a plus.

Required skills

• Deep knowledge of SAP authorization concepts, role design and best practices in SAP S/4HANA and SAP BTP.
• Hands-on experience with SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW and Pathlock Cloud.
• Understanding of compliance frameworks and standards (GxP, ICS/GISC, SoD).
• Comfortable using AI-powered tools such as ChatGPT, Claude and Copilot.