SAP Authorization Specialist (SAP Cloud Security) in Bern

Bern Full Time Vor Ort

Jetzt bewerben

Language: German-speaking (mandatory)

Domain: SAP Security, Authorizations, Identity and Access Management (IAM)

Role Overview

We are looking for an experienced, German-speaking SAP Authorization Specialist to support secure and compliant access management across a modern SAP and non-SAP cloud environment.

The successful candidate will be responsible for designing, implementing, and maintaining SAP authorization concepts across SAP S/4HANA, SAP Fiori, and SAP Business Technology Platform (BTP). The role combines traditional SAP authorization management with modern cloud security, identity management, compliance, and automation.

You will collaborate with enterprise architects, developers, SAP Operations, IAM specialists, and business stakeholders to deliver secure, scalable, and compliant access solutions that support ongoing SAP transformation and cloud adoption initiatives.

Key Responsibilities

Design, implement, and maintain authorization concepts for SAP S/4HANA, SAP Fiori, and SAP BTP.
Develop and optimise business roles, single roles, and composite roles based on business processes, security requirements, and compliance standards.
Configure and maintain SAP Fiori Business Catalogs, Business Roles, Spaces, Pages, and Launchpad content.
Analyse and implement SAP Fiori authorization requirements using PFCG and Fiori Content Management tools.
Support the transition towards a Fiori-first and cloud-based SAP landscape.
Design and govern SAP BTP authorization concepts, including:
Role Collections and Entitlements.
Subaccounts and Directories.
Global Accounts.
Cloud Foundry authorizations.
Business User and Platform User concepts.
Work with SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS) to implement secure authentication and user provisioning.
Perform authorization traces, security troubleshooting, and root cause analysis across SAP S/4HANA, SAP Fiori, and cloud environments.
Ensure compliance with Segregation of Duties (SoD), internal security policies, audit requirements, and access governance standards.
Collaborate with cross-functional teams to implement secure-by-design authorization solutions.
Drive automation and continuous improvement in authorization management and identity lifecycle processes.
Support strategic SAP transformation programmes and cloud adoption initiatives.

Mandatory Skills and Experience

Several years of hands-on experience in SAP Security, SAP Authorization Management, and Identity and Access Management (IAM).
Strong knowledge of SAP S/4HANA authorization concepts, role design, and access controls.
Practical experience with SAP Fiori authorization management, including:
Business Catalogs and Business Roles.
Spaces and Pages.
Integration with PFCG authorizations.
Experience performing SAP authorization traces, troubleshooting access issues, and conducting root cause analysis.
Understanding of SAP Fiori architecture and Fiori-first implementation approaches.
Hands-on knowledge of SAP BTP security and authorization concepts, including Role Collections, Entitlements, Subaccounts, Global Accounts, and Cloud Foundry authorizations.
Experience with SAP IAS and IPS for identity authentication and provisioning.
Understanding of Segregation of Duties (SoD), audit controls, and security compliance requirements.
Strong analytical, troubleshooting, and stakeholder communication skills.
German-speaking proficiency is mandatory.
Experience with SAP cloud security and hybrid SAP environments.
Knowledge of identity lifecycle automation and access governance.
Experience supporting large-scale SAP transformation and cloud migration programmes.
Familiarity with security automation and continuous improvement initiatives.
Experience working with enterprise architects, SAP Operations, developers, IAM teams, and business stakeholders.

#J-18808-Ljbffr