Security & Authorization Engineer (SAP S/4 & SAP BTP)

About the role

The Security & Authorization Engineer will design, develop and maintain SAP authorization concepts for SAP S/4HANA and SAP Business Technology Platform (BTP). You will ensure that role structures meet business needs and comply with regulated standards such as GxP and ICS/GISC.

Key responsibilities

• Design and maintain authorization concepts and role structures for SAP S/4HANA and SAP BTP.
• Lead the full lifecycle of SAP roles from requirements gathering to testing and ongoing maintenance.
• Manage user administration processes and continuously improve authorization procedures.
• Collaborate with the CORE S/4HANA Program and Security & Authorization Team to integrate requirements into releases.
• Administer identity management using SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW and Pathlock Cloud.
• Support compliance activities, security assessments and audits focusing on SoD and authorization risks.
• Provide expertise and act as a point of contact for role design inquiries across IT and business teams.
• Leverage AI‑powered tools (ChatGPT, Claude, Copilot) to enhance delivery quality and efficiency.

Required profile

• Bachelor’s degree in Computer Science, IT or related field, or equivalent experience.
• 8+ years of SAP Security & Authorization experience, preferably in a regulated (GxP) environment.
• Strong knowledge of SAP authorization concepts, role design methodologies and compliance frameworks (GxP, ICS/GISC, SoD).
• Fluent English; Portuguese or German a plus.
• Security certifications such as CISSP, CISM or CISA are advantageous.

Required skills

• SAP S/4HANA
• SAP BTP
• SAP Cloud Identity Services (IAS/IPS)
• SailPoint IDNOW
• Pathlock Cloud
• GxP and ICS/GISC compliance
• Segregation of Duties (SoD) analysis
• DevOps and Agile methodologies
• AI tools (ChatGPT, Claude, Copilot)

What we offer

• Inclusive, diverse work environment that values authenticity and equal opportunity.
• Opportunities to work on cutting‑edge SAP security projects within a global pharmaceutical leader.