SAP Security & Authorization Engineer

• Serve as the hands-on SAP Security lead for S/4HANA programs including:
  • Role design build test and maintain business Fiori roles.
  • Removal of deprecated tiles and update authorizations during upgrades
  • Updates to company-code-driven and derived roles
• Actively support unit testing SIT UAT performance reporting and training cycles often involving large user populations.
• Resolve defects raised in various testing cycles by updating the roles.
• Work directly with developers and functional teams to:
  • Assess security impacts
  • Perform pre-business testing
  • Validate fixes prior to business testing

• Personally design build test and maintain SAP security roles and authorizations across SAP systems (S/4HANA Fiori HANA DB SAC DATASPHERE PAPM ECC BI XI)
• Perform hands-on troubleshooting and remediation of complex authorization issues impacting Finance HR Procurement BW and reporting users.
• Provide direct production support including urgent access issues role corrections and user remediation.
• Perform feasibility assessments for new technologies by doing Proof of Concepts/Technology
• Secure custom programs/tables working with the ABAP development teams.
• Execute monthly SAP Security Note reviews support pack validation and hands-on regression testing.
• Actively support Sandbox Development QA Pre-Production and Production environments.

• Act as the hands-on SAP security SME for:
  • IAMSTRONG integrations
  • Manager access reviews and transfer reviews.
  • Segregation of Duties (SoD) and orphaned access remediation
• Personally support and troubleshoot ILM tooling related to onboarding offboarding audit controls and access cleanup.
• Partner directly with IAM ServiceNow and security teams to modernize and stabilize access request and fulfillment processes.

• Personally support SAP audits including access reviews evidence collection and remediation.
• Execute required security corrections directly in SAP to address audit findings.
• Serve as the primary technical contact for Audit Business Risk and Compliance partners on SAP security matters.

• Serve as the go-to SAP security authority for Finance Technology.
• Mentor and support team members through direct collaboration and hands-on problem solving.
• Create and maintain practical documentation and FAQs to improve self-service and reduce repeat issues.
• Help prioritize work while remaining directly accountable for complex or high-risk security changes.

• Bachelor's degree in IT or related field of study
• 8+ years of hands-on SAP Security & Authorization experience.
• 8+ years demonstrated experience personally building testing and troubleshooting SAP roles in ECC
• 2+ years hands on experience S/4HANA HANA DB SAC (Security Analytical Cloud) Datasphere PAPM ECC BI PI systems
• 8+ years proven experience supporting production SAP systems in a large multi-instance landscape
• 2+ years experience supporting audit activities and remediation directly within SAP

• Ability to balance BAU production support with major transformation initiatives.
• Strong communication skills with the ability to clearly explain security impacts to both technical and non-technical partners
• Experience supporting SAP S/4HANA transformations or large ERP modernization programs
• Experience with building SAP S/4 Fiori roles from catalogs/groups and spaces/pages
• Experience with design and building of HANA database security roles with System Object and Analytical privileges
• Experience working with Datasphere roles/scoped roles SAC teams/Roles role collections in BTP applications like PaPM Cloud Identity Services.
• Familiarity with IAM GRC ILM and automated access provisioning frameworks.
• Experience supporting analytics and reporting platforms integrated with SAP (BW SAC AO etc.)
• Prior experience in financial services or other regulated industries.

• SAP security remains stable compliant and business-enabling throughout ongoing S/4HANA and APEX initiatives
• Audit requests are handled efficiently with strong ownership and clear documentation
• Business partners experience responsive well-explained hands-on support.
• IAM and access management processes continue to improve through practical execution and collaboration
• The SAP Security team benefits from knowledge transfer consistency and technical mentorship

• Clear areas of ownership and accountability with work that connects directly to company and customer outcomes
• A collaborative environment where perspectives are welcomed
• Access to learning development and internal networks that support continuous growth and skill-building over time
• Employee-led communities and forums that foster connection learning and inclusion across the organization
• A culture grounded in integrity responsibility and stewardship-supported by a company with a strong legacy and a future-focused mindset

What We Do

Since 1851 MassMutual’s commitment has always been to help people protect their families support their communities and help one another. This is why we want to inspire people to Live Mutual. We’re people helping people. Together we’re stronger.

Why Work With Us

MassMutual has the financial security and stability of a 170+ year old company with the culture and energy of a startup. We work every day with the customer front of mind to build the best digital experience in the industry.

Gallery