SAP Authorization Consultant

Company Description:Accesa is a leading technology company headquartered in Cluj-Napoca, with offices in Oradea and 20 years of experience in turning business challenges into opportunities and growth.A value-driven organisation, it has established itself as a partner of choice for major brands in Retail, Manufacturing, Finance, and Banking. It covers the complete digital evolution journey of its customers, from ideation and requirements setup to software development and managed services solutions.With more than 1,200 IT professionals, Accesa also has a fast-growing footprint, establishing itself as an employer of choice for IT professionals who are passionate about problem-solving through technology. Coming together in strong tech teams with a customer-centric approach, they enable businesses to grow, delivering value for our clients, partners, industry, and community.Job Description:Our client is a trusted partner in the financial-banking sector in Germany, supporting a large-scale IT landscape across thousands of users and critical business applications. The environment is highly regulated, requiring strong governance, security, and operational excellence.Manage User Lifecycle & Access: Oversee end-to-end user administration (joiner–mover–leaver), including user creation, updates, deactivation, and role assignments, ensuring secure and business-aligned access while removing obsolete permissions.Process Access Requests & Governance: Handle access requests by validating approvals, ensuring compliance with policies, and delivering timely execution in line with agreed SLAs while collaborating with stakeholders to clarify requirements.Design & Maintain Roles: Create and maintain single, composite, and derived roles using SAP standard tools (PFCG, SUIM), ensuring consistent, scalable role design aligned with organizational and business needs.Support Authorization & Issue Resolution: Investigate and resolve authorization issues using tools such as SU53, ST01, and STAUTHTRACE, supporting daily operations and implementing long-term fixes for recurring access problems.Ensure Compliance & Audit Readiness: Perform Segregation of Duties (SoD) analysis, support GRC controls, and provide documentation, reports, and evidence required for audits, including periodic access reviews and recertifications.Drive Reporting, Changes & Continuous Improvement: Generate and maintain reports on users, roles, and access distribution, manage authorization changes (testing and transports), and continuously improve role design and access management processes. Qualifications:Must Have:Proven experience in SAP Authorizations supportHands-on experience with SAP user and role administration (PFCG, SUIM, SU01)Good understanding of authorization troubleshooting tools (SU53, ST01, STAUTHTRACE)Familiarity with SoD concepts and GRC processesExperience working in ticket-based, SLA-driven environmentsAbility to prioritize and manage multiple tasks in a structured and reliable manner, combined with a strong attention to detail and accuracyAnalytical thinking with the ability to investigate and resolve issues effectively; risk-aware, security-oriented mindsetStrong communication and stakeholder management skillsProficiency in German (B2 level or higher required) and EnglishNice to have:Experience with SAP GRC Access ControlKnowledge of SAP security best practices in regulated environmentsExperience with automation or scripting in SAP contextAdditional Information:At Accesa you canEnjoy our holistic benefits program that covers the four pillars that we believe come together to support our wellbeing, covering social, physical, emotional wellbeing, as well as work-life fusion.Physical Wellbeing: Our wellbeing program includes medical benefits, gym support, and personalised fitness options for an active lifestyle, complemented by team events and the Healthy Habits Club.Work-Life Fusion: In very dynamic industries such as IT, the line between our professional and personal lives can quickly become blurred. Having a one-size-fits-one approach gives us the flexibility to define the work-life dynamic that works for us.Emotional Wellbeing: We believe that to maintain our overall health, we need to invest in our mental wellbeing just as much as we do in our physical health, social connections or in achieving work-life balance.Social Wellbeing: As a growing community in a hybrid environment, we want to ensure we remain connected not just by the great work we do every day but through our passions and interests.