Senior In-House SAP Consultant Authorization Stream

• Bachelor in Applied Computer Science, Information Technology or similar
• Fluent English is required

• Professional experience in international projects
• Ideally, experience in planning/execution of migration and rollout projects
• Experience with coordinating external partner.

• Define and maintain end-to-end authorization concepts for SAP ECC, GTS e4H and S/4HANA (role design, authorization object strategy, and access governance) aligned with business processes and internal controls.
• Build and maintain roles using best-practice role methodology (business roles, derived/composite roles, organizational level strategy).
• Support authorization troubleshooting for business users and IT (2nd/3rd level), including root-cause analysis and sustainable fixes.

• Design and maintain Fiori role concepts (catalogs, groups/spaces/pages as applicable), launchpad access, and app authorization mapping coordinating with Functional teams.
• Ensure secure access patterns for OData services / UI integration in coordination with SAP Technology (Basis/Integration).

• Implement and operate HANA access and security controls in line with enterprise policies, including privilege concepts as required for SAP scenarios.
• Support internal/external audits by providing role documentation, access evidence, and remediation plans.

• Ensure secure, compliant, and auditable access aligned with Internal Financial Control
• Drive Segregation of Duties (SoD) and access risk mitigation in collaboration with compliance and process owners (where applicable).
• Maintain documentation standards for roles, changes, and approvals (audit trail completeness).

• Analyze and implement solutions within Incident and Change processes; deliver enhancements and fixes with quality and traceability.
• Contribute to migration, rollout, and transformation initiatives (e.g., S/4 rollouts, security redesign, harmonization), including coordination of external partners.
• Collaborate across streams (e.g., FICO, PTP, D2S/OTC, PLM) to translate processes requirements into secure access designs.
• Identify opportunities to improve access provisioning efficiency, role quality, and security controls (standardization, automation, reduced firefighting).
• Contribute to SAP security architecture discussions and continuous hardening measures.

• 8+ years SAP Authorization with at least 3+ years on S/4HANA, Fiori, SAP HANA security, experience with SAP BTP security is a plus.
• Strong expertise in SAP authorization concept design and operations across SAP ECC, SAP GTS e4H, and SAP S/4HANA landscapes, including role design
• Proven track record in project-based environments-including implementations, rollouts, and optimization initiatives-working effectively with both local IT teams and business stakeholders
• Strong analytical and problem-solving skills, with the ability to challenge existing access models and propose pragmatic, improvement-focused solutions.
• Experience working in international landscapes and collaborating with distributed teams and external partners
• Strong analytical and problem-solving skills; able to manage stakeholders' expectations effectively
• Customer orientation, independence, and teamwork mindset.

• Must-Have

• Cooperative Relationships
• Drive for Results
• Understanding Others
• Ethics and Values
• Integrity and Trust

• Nice to have

• keeps confidence
• personally committed
• very bottom-line orientated

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
• "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Oerlikon