Sap Security

We are seeking an experienced SAP Security & Access Governance Consultant to join our Global IT team. In this role, you will be responsible for SAP user administration, role design, access governance, and security compliance across the SAP landscape. As a subject matter expert in SAP Security, you will ensure access management processes adhere to governance and compliance requirements while supporting business operations through secure and efficient role provisioning.

While Putzmeister currently does not utilize the SAP GRC toolset, the successful candidate must possess a strong functional understanding of Governance, Risk, and Compliance (GRC) principles, including Segregation of Duties (SoD), critical access management, and authorization risk mitigation, and be able to embed these controls into SAP security processes and role designs.

Number of Positions: 1 (One)

Key Responsibilities

• Design, create, maintain, and optimize SAP roles using PFCG in alignment with business requirements and security standards.
• Perform SAP user administration activities including user creation, modification, deactivation, lock/unlock, and access maintenance using SU01.
• Develop and maintain single, composite, and derived roles while ensuring compliance with SAP authorization best practices.
• Review role designs and access requests to identify potential Segregation of Duties (SoD) conflicts and access risks.
• Apply governance and compliance controls during role creation and user provisioning processes without reliance on SAP GRC tools.
• Analyze critical SAP transaction codes and authorization objects to ensure appropriate access controls are implemented.
• Support periodic access reviews, user recertification exercises, and audit activities.
• Manage user provisioning and deprovisioning activities throughout the user lifecycle.
• Collaborate with business stakeholders to define role concepts and access models that balance operational efficiency with security requirements.
• Support Single Sign-On (SSO), authentication, and Identity & Access Management (IAM) related initiatives.
• Troubleshoot authorization-related issues and provide timely resolution for business-critical incidents.
• Develop and maintain security documentation, role design standards, access governance procedures, and operational guidelines.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Information Systems, or a related field.
• 8+ years of experience in SAP Security, User Administration, and Role Management.
• Strong hands-on experience with SAP authorization concepts, profiles, roles, and authorization objects.
• Proven experience working with SAP PFCG for role design, role maintenance, and role provisioning.
• Strong experience with SAP user administration (SU01) and related security transactions.
• Good functional understanding of Governance, Risk & Compliance (GRC) concepts, including:
• Segregation of Duties (SoD)
• Critical Access Management
• Access Governance
• Security Compliance Controls
• Ability to identify and mitigate access risks during role design and user provisioning activities.
• Knowledge of critical SAP transaction codes and associated authorization risks.
• Experience designing and supporting single, composite, and derived roles in SAP ECC and/or SAP S/4HANA environments.
• Understanding of Identity & Access Management (IAM) concepts, user lifecycle management, and access provisioning processes.
• Experience supporting Single Sign-On (SSO) and authentication mechanisms.
• Experience supporting internal and external audits and responding to compliance-related requirements.
• Strong analytical and troubleshooting skills with the ability to resolve complex authorization issues.
• Excellent communication and stakeholder management skills with the ability to collaborate effectively with business and IT teams.
• Ability to work independently while supporting global teams across multiple time zones.
• Willingness to provide support during planned system changes, audits, and critical business requirements when necessary.