About this role
Senior In-House SAP Authorization Consultant
Position Summary The SAP Authorization Consultant is responsible for designing, implementing, and operating a robust authorization and security framework across different SAP products including SAP ECC, SAP GTS e4H, S/4HANA, Fiori landscapes including HANA database security..
The consultant partners closely with SAP functional streams, SAP Technology (Basis/Integration).
Education and Work Experience Education: Bachelor in Applied Computer Science, Information Technology or similar Fluent English is required Work Experience: Professional experience in international projects Ideally, experience in planning/execution of migration and rollout projects Experience with coordinating external partner.
Tasks and Responsibilities
- Define and maintain end-to-end authorization concepts for SAP ECC, GTS e4H and S/4HANA (role design, authorization object strategy, and access governance) aligned with business processes and internal controls.
- Build and maintain roles using best-practice role methodology (business roles, derived/composite roles, organizational level strategy).
- Support authorization troubleshooting for business users and IT (2nd/3rd level), including root-cause analysis and sustainable fixes.
- Design and maintain Fiori role concepts (catalogs, groups/spaces/pages as applicable), launchpad access, and app authorization mapping coordinating with Functional teams.
- Ensure secure access patterns for OData services / UI integration in coordination with SAP Technology (Basis/Integration).
- Implement and operate HANA access and security controls in line with enterprise policies, including privilege concepts as required for SAP scenarios.
- Support internal/external audits by providing role documentation, access evidence, and remediation plans.
- Ensure secure, compliant, and auditable access aligned with Internal Financial Control Drive Segregation of Duties (SoD) and access risk mitigation in collaboration with compliance and process owners (where applicable).
- Maintain documentation standards for roles, changes, and approvals (audit trail completeness).
- Analyze and implement solutions within Incident and Change processes; deliver enhancements and fixes with quality and traceability.
- Contribute to migration, rollout, and transformation initiatives (e.g., S/4 rollouts, security redesign, harmonization), including coordination of external partners.
- Collaborate across streams (e.g., FICO, PTP, D2S/OTC, PLM) to translate processes requirements into secure access designs.
- Identify opportunities to improve access provisioning efficiency, role quality, and security controls (standardization, automation, reduced firefighting).
- Contribute to SAP security architecture discussions and continuous hardening measures.
Knowledge & Skills Summary 8+ years SAP Authorization with at least 3+ years on S/4HANA, Fiori, SAP HANA security, experience with SAP BTP security is a plus. Strong expertise in SAP authorization conc