SAP Authorization Specialist (SAP Cloud Security)

Us3 Consulting; Bern; On-site; CHF 120,000 - 160,000; Full time

Job summary

Us3 Ltd in der Schweiz sucht eine erfahrene SAP-Authorisierungsspezialistin bzw. -spezialisten, die deutschsprachig ist und komplexe Berechtigungen in S/4HANA, Fiori und BTP sicher gestaltet.

Sie entwerfen, implementieren und betreiben SAP-Authorisierungskonzepte, arbeiten eng mit Enterprise Architekten, SAP Operations und IAM-Teams zusammen und treiben Automatisierung und Governance im Identity-Lifecycle voran.

Qualifications

• Mehrjährige praktische Erfahrung in SAP Security, SAP Authorization Management und IAM.
• Fundierte Kenntnisse zu S/4HANA-Authorizations, Rollen-Design und Zugriffssteuerung.
• Praxis in SAP Fiori-Authorizationsmanagement inkl. Business Catalogs/Roles, Spaces, Pages.
• Erfahrung mit SAP BTP-Sicherheit, IAS und IPS.
• SoD, Audit-Controls und Governance verstehen.
• Deutschsprachige Kommunikation Pflicht.
• Zusammenarbeit mit Enterprise Architekten, SAP Operations, IAM-Teams und Stakeholder.

Responsibilities

• Entwerfen, implementieren und warten SAP-Authorisierungskonzepte für S/4HANA, Fiori und BTP.
• Entwickeln von Geschäftsrollen, Einzelrollen und Composite-Rollen basierend auf Prozessen und Sicherheitsanforderungen.
• Konfigurieren von Fiori-Berechtigungen, Spaces, Pages und Launchpad-Inhalten.
• Durchführen von Fiori-Authorizations-Analysen mittels PFCG und Content-Management-Tools.
• Unterstützung des Übergangs zu einer Fiori-first-Cloud-Landschaft.
• Governance von BTP-Authorizations (Role Collections, Entitlements, Subaccounts, Global Accounts).
• Arbeiten mit IAS/IPS für Authentifizierung und Provisioning.
• Durchführen von Berechtigungs-Traces, Troubleshooting und Root-Cause-Analysen.
• Sicherstellen von SoD-/Audit-Compliance und Sicherheitsrichtlinien.
• Zusammenarbeit mit Architekten, SAP Operations, IAM-Teams und Fachbereichen.
• Beschleunigen von Automatisierung und Identity-Lifecycle-Prozessen.
• Unterstützung größerer SAP-Transformationen und Cloud-Migrationen.

Skills

SAP Security

IAM

SAP S/4HANA

Fiori authorization management

PFCG

SoD knowledge

Security governance

Stakeholder communication

German-speaking

Tools

SAP IAS

SAP IPS

BTP Security

PFCG tools

Fiori Content Management tools

Job description

Language: German-speaking (mandatory)

Domain: SAP Security, Authorizations, Identity and Access Management (IAM)

Role Overview

We are looking for an experienced, German-speaking SAP Authorization Specialist to support secure and compliant access management across a modern SAP and non-SAP cloud environment.

The successful candidate will be responsible for designing, implementing, and maintaining SAP authorization concepts across SAP S/4HANA, SAP Fiori, and SAP Business Technology Platform (BTP). The role combines traditional SAP authorization management with modern cloud security, identity management, compliance, and automation.

You will collaborate with enterprise architects, developers, SAP Operations, IAM specialists, and business stakeholders to deliver secure, scalable, and compliant access solutions that support ongoing SAP transformation and cloud adoption initiatives.

Key Responsibilities

• Design, implement, and maintain authorization concepts for SAP S/4HANA, SAP Fiori, and SAP BTP.
• Develop and optimise business roles, single roles, and composite roles based on business processes, security requirements, and compliance standards.
• Configure and maintain SAP Fiori Business Catalogs, Business Roles, Spaces, Pages, and Launchpad content.
• Analyse and implement SAP Fiori authorization requirements using PFCG and Fiori Content Management tools.
• Support the transition towards a Fiori-first and cloud-based SAP landscape.
• Design and govern SAP BTP authorization concepts, including:
• Role Collections and Entitlements.
• Subaccounts and Directories.
• Global Accounts.
• Cloud Foundry authorizations.
• Business User and Platform User concepts.
• Work with SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS) to implement secure authentication and user provisioning.
• Perform authorization traces, security troubleshooting, and root cause analysis across SAP S/4HANA, SAP Fiori, and cloud environments.
• Ensure compliance with Segregation of Duties (SoD), internal security policies, audit requirements, and access governance standards.
• Collaborate with cross-functional teams to implement secure-by-design authorization solutions.
• Drive automation and continuous improvement in authorization management and identity lifecycle processes.
• Support strategic SAP transformation programmes and cloud adoption initiatives.

Mandatory Skills and Experience

• Several years of hands-on experience in SAP Security, SAP Authorization Management, and Identity and Access Management (IAM).
• Strong knowledge of SAP S/4HANA authorization concepts, role design, and access controls.
• Practical experience with SAP Fiori authorization management, including:
• Business Catalogs and Business Roles.
• Spaces and Pages.
• Integration with PFCG authorizations.
• Experience performing SAP authorization traces, troubleshooting access issues, and conducting root cause analysis.
• Understanding of SAP Fiori architecture and Fiori-first implementation approaches.
• Hands-on knowledge of SAP BTP security and authorization concepts, including Role Collections, Entitlements, Subaccounts, Global Accounts, and Cloud Foundry authorizations.
• Experience with SAP IAS and IPS for identity authentication and provisioning.
• Understanding of Segregation of Duties (SoD), audit controls, and security compliance requirements.
• Strong analytical, troubleshooting, and stakeholder communication skills.
• German-speaking proficiency is mandatory.
• Experience with SAP cloud security and hybrid SAP environments.
• Knowledge of identity lifecycle automation and access governance.
• Experience supporting large-scale SAP transformation and cloud migration programmes.
• Familiarity with security automation and continuous improvement initiatives.
• Experience working with enterprise architects, SAP Operations, developers, IAM teams, and business stakeholders.