Job Description

Security & Authorization Engineer (SAP)

We are looking for a Security & Authorization Engineer with a focus on SAP role design and authorization concept development within SAP S/4HANA and SAP BTP

Working closely with the CORE S/4HANA Program and its Security & Authorization Team, this role supports the design, implementation, and maintenance of authorization concepts and role structures that align with business needs and compliance requirements.

The ideal candidate brings solid SAP authorization expertise and is comfortable leveraging modern AI-powered tools to work more effectively.

Your Tasks and Responsibilities

1. Authorization Concept & Role Support

• Support the design, implementation, and maintenance of authorization concepts and role structures within SAP S/4HANA and SAP BTP.
• Ensure alignment with:
  • business requirements
  • compliance standards
  • operational needs
• Support compliance with standards such as GxP and ICS/GISC

2. Role Lifecycle Support

• Support the end-to-end lifecycle of SAP roles, including:
  • requirements gathering
  • concept design
  • role build
  • testing
  • ongoing maintenance

3. User Administration & Authorization Processes

• Execute and maintain user administration processes and authorization-related procedures within SAP S/4HANA and SAP BTP.
• Help ensure efficient and sustainable authorization operations.

4. Program Collaboration

• Collaborate closely with the CORE S/4HANA Program and its Security & Authorization Team
• Ensure authorization requirements are properly integrated into:
  • program initiatives
  • project activities
  • release cycles

5. Identity Management Support

• Support identity management processes using:
  • SAP Cloud Identity Services (IAS/IPS)
  • SailPoint IDNOW
  • Pathlock Cloud

6. Compliance & Governance Support

• Support compliance and governance activities, including:
  • security assessments
  • audits
  • authorization risk reviews
  • segregation of duties ( SoD) controls

7. Continuous Improvement & Innovation

• Stay current on SAP S/4HANA and SAP BTP authorization best practices, including SAP’s embedded AI capabilities
• Leverage AI-powered tools such as ChatGPT, Claude, Copilot, or similar to improve delivery quality and efficiency.

Who You Are

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• 5+ years of experience in SAP Security & Authorization, with a focus on:
  • role design
  • authorization concepts
  • SAP S/4HANA
  • SAP BTP
• Experience in a regulated ( GxP) environment is a plus.

Technical Expertise

• Solid knowledge of:

  • SAP authorization concepts
  • role design methodologies
  • authorization best practices within SAP S/4HANA and SAP BTP

• Experience with:

  • SAP Cloud Identity Services (IAS/IPS)
  • SailPoint IDNOW
  • Pathlock Cloud

  is a plus.

Compliance & Delivery

• Understanding of:
  • GxP
  • ICS/GISC
  • Segregation of Duties (SoD)
• Experience with DevOps and Agile methodologies is a plus.

AI & Modern Tooling

• Comfortable using AI-powered tools such as ChatGPT, Claude, Copilot, or similar as part of the daily workflow.

Communication & Collaboration

• Good problem-solving and communication skills.
• Experience in international or cross-cultural teams is a plus.

Certifications

• Security certifications such as CISSP, CISM, or CISA are a plus.

Languages

• Fluent in English (required)
• Spanish is a plus
• Portuguese is an additional advantage

Período de aplicación: 07 AL 30 DE JUNIO Código de referencia: 870750
División: Enabling Functions Ubicación: Mexico : Ciudad de México : Ciudad de México
Área funcional: Tecnología de la información Grado de posición: VS 1.1
Tipo de empleo: Permanente Tiempo de trabajo: FULL TIME - HIBRIDO