About this role
<table style="width:970.0px" border="0" cellspacing="0" cellpadding="0"> <tbody> <tr> <td colspan="4"> <table style="width:970.0px" border="0" cellspacing="0" cellpadding="0"> <tbody> <tr> <td style="background-color:white"><span style="font-family:arial, helvetica, sans-serif;font-size:8.0pt"><img src="https://career.bayer.com/sites/g/files/kmftyc1291/files/Internal%20Job%20Postings.jpg" border="0"></span></td> </tr> </tbody> </table> </td> <td> </td> </tr> <tr> <td style="vertical-align:top" colspan="4"> <p align="justify"> </p> <p align="justify"><span style="font-size:28.0px"><span style="font-family:arial, helvetica, sans-serif"><strong>Security & Authorization Engineer (SAP)</strong></span> </span></p> </td> <td style="vertical-align:top"> </td> </tr> <tr> <td style="vertical-align:top" colspan="4"> </td> <td style="vertical-align:top"> </td> </tr> <tr> <td style="vertical-align:top" colspan="4"> </td> <td style="vertical-align:top"> </td> </tr> </tbody> </table><p>We are looking for a <span>Security & Authorization Engineer</span> with a focus on <span>SAP role design</span> and <span>authorization concept development</span> within <span>SAP S/4HANA</span> and <span>SAP BTP</span>.</p> <p>Working closely with the <span>CORE S/4HANA Program</span> and its <span>Security & Authorization Team</span>, this role supports the design, implementation, and maintenance of authorization concepts and role structures that align with business needs and compliance requirements.</p> <p>The ideal candidate brings solid <span>SAP authorization expertise</span> and is comfortable leveraging modern <span>AI-powered tools</span> to work more effectively.</p> <hr> <h2>Your Tasks and Responsibilities</h2> <h3>1. Authorization Concept & Role Support</h3> <ul style="list-style-type:disc"> <li>Support the design, implementation, and maintenance of <span>authorization concepts</span> and <span>role structures</span> within SAP S/4HANA and SAP BTP.</li> <li>Ensure alignment with: <ul style="list-style-type:disc"> <li>business requirements</li> <li>compliance standards</li> <li>operational needs</li> </ul> </li> <li>Support compliance with standards such as <span>GxP</span> and <span>ICS/GISC</span>.</li> </ul> <h3>2. Role Lifecycle Support</h3> <ul style="list-style-type:disc"> <li>Support the <span>end-to-end lifecycle of SAP roles</span>, including: <ul style="list-style-type:disc"> <li>requirements gathering</li> <li>concept design</li> <li>role build</li> <li>testing</li> <li>ongoing maintenance</li> </ul> </li> </ul> <h3>3. User Administration & Authorization Processes</h3> <ul style="list-style-type:disc"> <li>Execute and maintain <span>user administration processes</span> and <span>authorization-related procedures</span> within SAP S/4HANA and SAP BTP.</li> <li>Help ensure efficient and sustainable authorization operations.</li> </ul> <h3>4. Program Collaboration</h3> <ul style="list-style-type:disc"> <li>Collaborate closely with the <span>CORE S/4HANA Program</span> and its <span>Security & Authorization Team</span>.</li> <li>Ensure authorization requirements are properly integrated into: <ul style="list-style-type:disc"> <li>program initiatives</li> <li>project activities</li> <li>release cycles</li> </ul> </li> </ul> <h3>5. Identity Management Support</h3> <ul style="list-style-type:disc"> <li>Support identity management processes using: <ul style="list-style-type:disc"> <li><span>SAP Cloud Identity Services (IAS/IPS)</span></li> <li><span>SailPoint IDNOW</span></li> <li><span>Pathlock Cloud</span></li> </ul> </li> </ul> <h3>6. Compliance & Governance Support</h3> <ul style="list-style-type:disc"> <li>Support <span>compliance and governance activities</span>, including: <ul style="list-style-type:disc"> <li>security assessments</li> <li>audits</li> <li>authorization risk reviews</li> <li>segregation of duties (<span>SoD</span>) controls</li> </ul> </li> </ul> <h3>7. Continuous Improvement & Innovation</h3> <ul style="list-style-type:disc"> <li>Stay current on SAP S/4HANA and SAP BTP authorization best practices, including <span>SAP’s embedded AI capabilities</span>.</li> <li>Leverage <span>AI-powered tools</span> such as <span>ChatGPT, Claude, Copilot</span>, or similar to improve delivery quality and efficiency.</li> </ul> <hr> <h2>Who You Are</h2> <ul style="list-style-type:disc"> <li>Bachelor’s degree in <span>Computer Science, Information Technology</span>, or a related field, or equivalent work experience.</li> <li><span>5+ years of experience</span> in <span>SAP Security & Authorization</span>, with a focus on: <ul style="list-style-type:disc"> <li>role design</li> <li>authorization concepts</li> <li>SAP S/4HANA</li> <li>SAP BTP</li> </ul> </li> <li>Experience in a regulated (<span>GxP</span>) environment is a plus.</li> </ul> <h3>Technical Expertise</h3> <ul style="list-style-type:disc"> <li> <p>Solid knowledge of:</p> <ul style="list-style-type:disc"> <li>SAP authorization concepts</li> <li>role design methodologies</li> <li>authorization best practices within SAP S/4HANA and SAP BTP</li> </ul> </li> <li> <p>Experience with:</p> <ul style="list-style-type:disc"> <li><span>SAP Cloud Identity Services (IAS/IPS)</span></li> <li><span>SailPoint IDNOW</span></li> <li><span>Pathlock Cloud</span></li> </ul> <p>is a plus.</p> </li> </ul> <h3>Compliance & Delivery</h3> <ul style="list-style-type:disc"> <li>Understanding of: <ul style="list-style-type:disc"> <li><span>GxP</span></li> <li><span>ICS/GISC</span></li> <li><span>Segregation of Duties (SoD)</span></li> </ul> </li> <li>Experience with <span>DevOps</span> and <span>Agile methodologies</span> is a plus.</li> </ul> <h3>AI & Modern Tooling</h3> <ul style="list-style-type:disc"> <li>Comfortable using <span>AI-powered tools</span> such as <span>ChatGPT, Claude, Copilot</span>, or similar as part of the daily workflow.</li> </ul> <h3>Communication & Collaboration</h3> <ul style="list-style-type:disc"> <li>Good <span>problem-solving</span> and <span>communication</span> skills.</li> <li>Experience in <span>international</span> or <span>cross-cultural teams</span> is a plus.</li> </ul> <h3>Certifications</h3> <ul style="list-style-type:disc"> <li>Security certifications such as <span>CISSP, CISM, or CISA</span> are a plus.</li> </ul> <h3>Languages</h3> <ul style="list-style-type:disc"> <li><span>Fluent in English</span> (required)</li> <li><span>Spanish</span> is a plus</li> <li><span>Portuguese</span> is an additional advantage</li> </ul><table style="width:970.0px" border="0" cellspacing="1" cellpadding="1" align="left"> <tbody> <tr> <td colspan="3"> </td> </tr> <tr> <td colspan="3"> <p> </p> </td> </tr> </tbody> </table> <table style="width:970.0px" border="0" cellspacing="0" cellpadding="0"> <tbody> <tr> <td style="vertical-align:top" colspan="4"> </td> <td style="vertical-align:top"> </td> </tr> <tr> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>Período de aplicación:</strong></span></td> <td style="vertical-align:top;width:200.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><span style="color:#ff0000">07 AL 30 DE JUNIO</span></span></td> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>Código de referencia:</strong></span></td> <td style="vertical-align:top"><span style="font-family:arial, helvetica, sans-serif;font-size:8.0pt">870750 </span></td> <td style="vertical-align:top"> </td> </tr> <tr> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>División:</strong></span></td> <td style="vertical-align:top;width:150.0px"><span style="font-family:arial, helvetica, sans-serif;font-size:8.0pt">Enabling Functions </span></td> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>Ubicación:</strong></span></td> <td style="vertical-align:top"><span style="font-family:arial, helvetica, sans-serif;font-size:8.0pt">Mexico : Ciudad de México : Ciudad de México </span></td> <td style="vertical-align:top"> </td> </tr> <tr> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>Área funcional:</strong></span></td> <td style="vertical-align:top;width:150.0px"><span style="font-family:arial, helvetica, sans-serif;font-size:8.0pt">Tecnología de la información </span></td> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>Grado de posición:</strong></span></td> <td style="vertical-align:top"><span style="font-family:arial, helvetica, sans-serif;font-size:8.0pt">VS 1.1 </span></td> <td style="vertical-align:top"> </td> </tr> <tr> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>Tipo de empleo:</strong></span></td> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif">Permanente </span></td> <td style="vertical-align:top;width:150.0px"><span style="font-size:8.0pt;font-family:arial, helvetica, sans-serif"><strong>Tiempo de trabajo:</strong></span></td> <td style="vertical-align:top"><span style="color:#ff0000;font-family:arial, helvetica, sans-serif;font-size:8.0pt">FULL TIME - HIBRIDO</span></td> <td style="vertical-align:top"> </td> </tr> </tbody> </table> <table style="width:970.0px" border="0" cellspacing="1" cellpadding="1" align="left"> <tbody> <tr> <td colspan="3"> </td> </tr> <tr> <td colspan="3"> </td> </tr> <tr> <td colspan="3"> </td> </tr> <tr> <td colspan="3"> </td> </tr> <tr> <td> </td> <td style="width:150.0px"> </td> <td> </td> </tr> <tr> <td> </td> <td style="width:150.0px"> </td> <td> </td> </tr> <tr> <td> </td> <td style="width:150.0px"> <p> </p> </td> <td> </td> </tr> <tr> <td colspan="3"> </td> </tr> <tr> <td colspan="3"> </td> </tr> </tbody> </table>