SAP Security & Authorisation Consultant (m/f/d) - Roles & Profiles
At Zoi · Barcelona, Catalunya [Cataluña], Spain; Figueres, Girona , Catalunya [Cataluña], Spain; Las Palmas , Canarias, Spain; Li…
- Security
- Full-time
Where you’ll work
Hybrid, based in Barcelona, Seville or Lisbon
“Barcelona, Catalunya [Cataluña], Spain”
From the location.
“Figueres, Girona , Catalunya [Cataluña], Spain”
From the location.
“Las Palmas , Canarias, Spain”
From the location.
“Lisbon, Lisboa, Portugal”
From the location.
“Seville , Andalucía, Spain”
From the location.
The job board lists it as hybrid.
Hybrid means some days in the office. The listing says how many, and where.
Report a mistake
- Posted
- 13 October 2026
- First seen by us
- 15 October 2026
- Last checked
- 25 hours ago
Job description
From Zoi’s job post, as they wrote it.
YOUR BRILLIANT FUTURE IN TECH IS NOW
Welcome to the world of Zoi! We transform manufacturing and retail enterprises through AI-first strategies that deliver measurable business value. We don't just advise: we implement, operate, and scale solutions that turn AI adoption into competitive advantage.
We are expanding our European teams in Lisbon, Barcelona, Figueres, Sevilla and Las Palmas. Just choose your favorite Zoi city! Travel between our locations is possible.
Read the full description
WHAT YOU DO
* Manage and maintain SAP authorizations, user accounts, and security profiles across ABAP and S/4HANA environments.
* Design, build, test, and deploy single, derived, and composite roles using transaction PFCG in accordance with security best practices.
* Perform Segregation of Duties (SoD) conflict analyses and support audit compliance and access review processes.
* Administer user access and role collections in SAP Business Technology Platform (BTP) and connected cloud services.
* Handle daily authorization support tickets, troubleshooting access issues, missing authorizations, and emergency access requests.
* Collaborate closely with internal project teams, functional consultants, and client stakeholders at Kärcher to ensure robust security posture.
WHO YOU ARE
* Professional experience in SAP Basis with a strong focus on SAP Security, Authorizations, and Role Maintenance.
* Proficient in PFCG role management, authorization concept design, and SAP user lifecycle management.
* Familiar with SAP BTP authorization administration, role collections, and identity management concepts.
* Understanding of compliance frameworks, Segregation of Duties (SoD), and audit requirements in enterprise IT environments.
* Fluent in English with strong written and verbal communication skills.
* A proactive problem-solver with a strong consulting mindset, who takes full ownership of responsibilities and thrives in collaborative client environments.
Do you like to be surrounded by brilliant minds? Awesome. At Zoi, you become part of our community of tech enthusiasts and develop your full potential. Create fresh ideas and shape the digital transformation of our enterprise customers sustainably.
* GOOD WORK SHOULD BE REWARDED, which is why we offer various bonus models at our company
* TIME IS WISDOM, 20 % of your working time is available for experimenting and education
* SKILL YOURSELF UP, Zoi can only be as good as you are. That’s why we value constant training and development
* BE FREE thanks to our absolutely flexible working hours and work remotely from any of our locations
* LEVERAGE AI POWER with access to cutting-edge AI technologies, to automate tasks, gain insights, and innovate
* DEVELOP YOURSELF with our individual certification and training plan
* FAMILY COMES FIRST, rely on our financial support for childcare
* REFUEL at our regular free Friday lunch
Zoi is an equal opportunity employer, we're committed to helping you do your best work. Our promise is to champion diversity, build an inclusive culture and do our part to create a more equitable professional landscape.
Get jobs like this by email
Once a week, we email the new remote jobs open where you live, each with the line that proves it. Every email has a one-click unsubscribe.
