Security Engineer II

SAP Security Engineer

About the role

As an SAP Security Engineer,you will be part of a team responsible for security, identity and access management, authorization, and governance across a large and diverse SAP landscape.

Your primary focus will be on SAP S/4HANA (application) and SAP HANA (database), while also working with a broad range of SAP and connected technologies. You will contribute across both project delivery and day-to-day operations, helping us provide secure, compliant, and efficient access while continuously strengthening the security of our application landscape.

Your key responsibilities

• Design, develop, operate, and govern identity, access, and authorization solutions across the SAP landscape.
• Develop and maintain standard operating procedures, technical documentation, and security guidelines.
• Act as a subject matter expert and central point of contact for SAP security and authorization topics.
• Analyze business and technical requirements and translate them into secure, scalable, and sustainable solutions.
• Design and implement authorization changes within established release and change management processes.
• Develop and maintain access products and role concepts that enable compliant, efficient, and timely access provisioning.
• Monitor, analyze, and resolve security- and authorization-related incidents and issues.
• Provide extended support during upgrades, go-lives, migrations, and hyper-care periods.
• Assess security risks and design and implement appropriate controls and security-hardening measures.
• Support Business and IT stakeholders during internal and external audits, including the preparation and review of relevant evidence.
• Identify opportunities to simplify, automate, and continuously improve security and access-management processes.

About the team

Swiss Re operates two major SAP finance landscapes: one centered around SAP S/4HANA General Ledger and another around SAP Financial Products Subledger (FPSL).

The Access team supports both the build/project and run/operations activities for these environments, together with the related applications, platforms, and infrastructure.

Our responsibilities span identity, access, authorization, security, and governance across technologies including:

• SAP S/4HANA – application authorizations
• SAP HANA – database security and authorizations
• SAP BW – Analysis Authorizations
• SAP Fiori – catalogs, groups, spaces, pages, and application access
• SAP Process Orchestration (PO)
• SAP HANA XS Advanced (XSA)
• SAP Business Planning and Consolidation (BPC)
• SAP Solution Manager
• ChaRM – change and transport management
• Central User Administration (CUA)
• SAP Analytics Cloud (SAC)
• SAP Business Technology Platform (BTP)
• SAP Integration Suite
• SAP Cloud ALM

The team also:

• Uses ServiceNow to manage changes, incidents, operational tasks, and access requests.
• Uses Xiting Authorizations Management Suite (XAMS) to strengthen and optimize SAP security and authorization management and to support the business with its Segregation of Duties (SoD) control framework.

About you

What you bring

• Strong knowledge and hands-on experience in SAP S/4HANA security, roles, and authorizations.
• Good knowledge and practical experience with SAP Fiori security and authorizations.
• Good knowledge and practical experience with SAP HANA database security and authorizations.
• Experience with identity and access management in at least one of the additional SAP technologies listed above.
• Good understanding of SAP security principles, role design, access governance, and security controls.
• Ability to analyze complex authorization requirements and translate them into practical and secure technical solutions.
• Minimum 5 years of relevant experience.
• Strong written and spoken English.

Nice to have

• Strong analytical and problem-solving skills.
• Curiosity and motivation to learn and explore new technologies.
• A proactive, self-driven, and creative approach, with a genuine interest in SAP security and continuous improvement.
• A collaborative and service-oriented mindset.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Ability to take ownership while working effectively as part of a global and diverse team.
• Experience with Segregation of Duties, audit requirements, security controls, or access governance.
• An interest in automation and modernizing security and access-management processes.