• As our SAP Authorization & Security Architect, you will:Design and maintain the target authorization model for SAP S/4HANA, including roles, authorization objects, naming conventions, and segregation of duties (SoD) controls.
• Lead the redesign and optimisation of the existing SAP authorization landscape, reducing SoD conflicts and strengthening governance.
• Define and govern security and authorization models across SAP Fiori, SAP BTP, APIs, and side-by-side extensions.
• Architect identity and access management solutions using SAP Cloud Identity Services (IAS/IPS), Single Sign-On, and Microsoft Entra ID integration.
• Establish security standards, guardrails, and reusable frameworks that enable delivery teams to build securely and consistently.
• Drive SAP platform hardening, secure configurations, audit readiness, and continuous improvements to our overall security posture.

Qualifications

• To succeed in this role, you will bring:Several years of hands-on experience in SAP security and authorizations, including role redesign or authorization remediation initiatives.
• Strong expertise in SAP S/4HANA security, SAP Fiori authorizations, PFCG roles, authorization objects, and segregation of duties analysis.
• Experience with SAP BTP security, including role collections, trust configuration, and modern authentication technologies such as SAML, OAuth, and OIDC.
• Knowledge of SAP Cloud Identity Services (IAS/IPS) and enterprise identity integration with platforms such as Microsoft Entra ID.
• Understanding of SAP RISE / Private Cloud Edition environments, cloud security principles, and Clean Core architecture.
• Familiarity with governance and compliance requirements such as GDPR, NIS2, and SOX-related controls.
• Excellent communication skills and the ability to collaborate with both technical and business stakeholders in an international environment.
• Fluent English.