SAP Authorization Consultant

About the Role
The company is seeking a certified SAP Authorization Consultant to play a key role in an SAP S/4HANA Public Cloud implementation. This position involves designing and managing user access and security to ensure that business roles, restrictions, and identity setups are secure, compliant, and align with client job functions. You will collaborate closely with functional consultants and client stakeholders throughout the design phase and through to the go-live process. This is a remote role.

Responsibilities

• Design business roles from SAP templates, based on client job functions and processes.
• Configure business catalogs, business role templates, and read/write/value help restrictions.
• Set up SAP Cloud Identity Services (IAS/IPS) for SSO, user provisioning, and integration with the client’s identity provider.
• Run segregation of duties (SoD) checks and resolve access conflicts.
• Manage user creation, role assignment, and access changes throughout the go-live and hypercare phases.
• Support internal and external audits through access reviews and documentation.
• Document role designs and security setups, handling authorization issues and support requests.

Requirements

• 4+ years of SAP security/authorization experience, with hands-on S/4HANA Public Cloud IAM exposure.
• Valid SAP S/4HANA Cloud Public Edition certification (security certification preferred).
• Solid knowledge of SAP Cloud Identity Services (IAS/IPS) and SSO setup (SAML, Azure AD / Entra ID).
• Good understanding of SoD, compliance, and audit requirements.
• Experience on at least one S/4HANA Cloud Public Edition implementation.
• Strong communication skills in English, capable of direct remote client engagement.
• Experience with SAP GRC or SAP Cloud IAG is a plus.