SAP Authorizations Architect

About the role

The SAP Authorizations Architect will design, govern and continuously improve SAP security, identity and access management across the Ras Al Khaimah Government SAP landscape hosted on RISE with SAP (Private Cloud). The role covers S/4HANA, BW on HANA, BTP, Fiori, CPI, SAC, GRC and API Management, ensuring end‑to‑end access governance, SoD compliance and alignment with UAE government security standards.

Key responsibilities

• Design and maintain SAP role architecture for S/4HANA, Fiori, BW, BTP, CPI, SAC and API Management.
• Develop business, composite and technical roles with strict SoD compliance; perform SU24 maintenance, SU53 analysis and STAUTHTRACE troubleshooting.
• Implement and optimise Fiori catalogs, groups, spaces and OData authorisation models.
• Manage cloud IAM integrations (IAS/IPS, Azure AD), OAuth tokens, trust configurations and SSO (SAML2).
• Conduct periodic access reviews, user attestation and audit documentation.
• Oversee SAP identity lifecycle (joiner, mover, leaver) across on‑premise, cloud and BTP environments.
• Apply SAP Security Notes, patch compliance and vulnerability remediation; perform risk assessments.
• Collaborate with Basis, functional and development teams to secure integrations, RFCs and APIs.

Required profile

• Bachelor’s or Master’s degree in Computer Applications or related field.
• 10–15 years of SAP Security, Authorisations and GRC experience, including at least 2 years on RISE with SAP.
• Strong knowledge of cloud‑based IAM, NIST, ISO 27001 and UAE government security standards.
• Relevant certifications such as SAP Security/GRC, Cloud IAM (Azure/Okta) and cybersecurity (CISSP, CISM) are a plus.

Required skills

• SAP S/4HANA role design
• SAP BW on HANA
• SAP Business Technology Platform (BTP)
• SAP Fiori and OData authorisation
• SAP Cloud Platform Integration (CPI)
• SAP Analytics Cloud (SAC)
• SAP GRC Access Control / Process Control
• SAP API Management
• OAuth, SAML2, certificate management
• Azure Active Directory and IAS/IPS integration
• SU24, SU53, STAUTHTRACE troubleshooting
• SoD analysis and remediation