sap authorizations

At least 5 years SAP authorizations administration experience

Experience with the creation, modification and maintenance of SAP authorization roles following highest state-of-the-art system security standards.

Experience troubleshooting errors and access incidents regarding user provisioning and permissions.

Experience with SAP IDM/Savyint/IAG/Cloud Identity Services/Cloud Provisioning Services, SAP ByDesign Authorization, S/4HANA cloud authorization knowledge

Experience with Audit and SOD

Ideally, advanced knowledge in at least one SAP module

Ability to work in global environment with enterprise-first mentality

Must have excellent English skills (both verbal and written)

Have positive attitude, energy, and willingness to learn new areas and drive to make it happen

A team player who can motivate others, making it fun while getting the job done.

Expectations and Tasks:

Problem solving in user access provisioning activities

Analyzing and troubleshooting authorization issues

Documentation of (existing) authorization concepts

Support of role testing during implementation phases

Analysis, design, and harmonization of (existing) roles and authorizations concepts as part of implementation project teams. 

Ensure that the security roles are appropriately assigned to users and tested thoroughly before deployment.

Develop and maintain standards and procedures for the SAP Security (Fiori, Application and HANA) and user access controls all SAP instances.

Review the business blueprint, functional specifications for SAP security role development and user acceptance test plans and participate in cutover activities during go-live phases.

Evaluate business risks associated with security role design, implement appropriate controls to address those risks and provide recommendations on ways to simplify and streamline the security design.

Identify role owners and automate the role and user provisioning processes