SAP Authorization Specialist

Us3 Consulting; Zürich; On-site; CHF 140,000 - 190,000; Full time

Job summary

Us3 Ltd is seeking an experienced SAP Authorization Specialist (SAP Cloud Security) to design and maintain secure authorization across SAP S/4HANA, Fiori, and BTP.

The role requires 7+ years in SAP security/IAM, hands-on PFCG, BTP security, IAS/IPS, and German language proficiency, in a modern cloud environment supporting 80k identities.

Qualifications

• Minimum 7+ years of experience in SAP Security, SAP Authorization Management, or IAM.
• Experience with SAP S/4HANA authorization concepts and role design.
• Proficiency in SAP BTP security and IAM services including SAP IAS/IPS.

Responsibilities

• Design, implement, and maintain secure authorization concepts across SAP S/4HANA, SAP Fiori, and SAP BTP.
• Configure and manage PFCG roles, including single and composite roles.
• Ensure SoD compliance, audits, and security troubleshooting.

Skills

SAP Security

SAP Authorization

IAM

S/4HANA authorization

PFCG roles

Fiori security

BTP security

SoD awareness

German language

Tools

SAP IAS

SAP IPS

Job description

We are looking for an experienced SAP Authorization Specialist (SAP Cloud Security) to join an SAP Integration Hub supporting approximately 80,000 identities across a modern SAP and non-SAP cloud environment.

The successful candidate will be responsible for designing, implementing, and maintaining secure authorization concepts across SAP S/4HANA, SAP Fiori, SAP Business Technology Platform (BTP), and associated Identity and Access Management (IAM) services.

The role combines traditional SAP authorization management with modern cloud security, identity provisioning, compliance, and automation.

Mandatory Technical Skills

• Minimum 7+years of experience in SAP Security, SAP Authorization Management, or IAM.
• Strong hands-on experience with SAP S/4HANA authorization concepts and role design.
• Experience configuring SAP PFCG roles, including single and composite roles.
• Business Catalogs and Business Roles
• Spaces and Pages
• PFCG integration
• Hands-on knowledge of SAP BTP security and authorization concepts:
• Role Collections
• Entitlements
• Global Accounts and Subaccounts
• Directories
• Cloud Foundry Roles
• Platform Users and Business Users
• Experience with SAP IAS and IPS for authentication and identity provisioning.
• Experience with SAP authorization traces and security troubleshooting.
• Understanding of Segregation of Duties (SoD), audit requirements, and security compliance.
• Knowledge of SAP Fiori architecture and Fiori First implementation approaches.
• German language proficiency is mandatory.