SAP Architect Authorization and Security

Location: Finland, or Germany (Hybrid) Are you an experienced SAP Security Architect looking for an opportunity to influence the future of a global SAP landscape? At Konecranes, we are on a transformational journey, modernising our SAP ecosystem with SAP S/4HANA, SAP Business Technology Platform (BTP), and Clean Core principles. We are seeking a SAP Authorization & Security Architect to take ownership of our SAP security architecture, governance, and authorization strategy. In this role, you will act as the central authority for SAP security and access management, ensuring our SAP environment remains secure, compliant, and ready to support future business growth. You will work closely with SAP architects, development teams, IAM specialists, IT Security, business process owners, and leadership stakeholders across our global organisation. This is a unique opportunity to build and shape the future authorization framework for a global industrial technology leader following a major SAP transformation programme. As our SAP Authorization & Security Architect, you will: Design and maintain the target authorization model for SAP S/4HANA, including roles, authorization objects, naming conventions, and segregation of duties (SoD) controls. Lead the redesign and optimisation of the existing SAP authorization landscape, reducing SoD conflicts and strengthening governance. Define and govern security and authorization models across SAP Fiori, SAP BTP, APIs, and side-by-side extensions. Architect identity and access management solutions using SAP Cloud Identity Services (IAS/IPS), Single Sign-On, and Microsoft Entra ID integration. Establish security standards, guardrails, and reusable frameworks that enable delivery teams to build securely and consistently. Drive SAP platform hardening, secure configurations, audit readiness, and continuous improvements to our overall security posture. To succeed in this role, you will bring: Several years of hands-on experience in SAP security and authorizations, including role redesign or authorization remediation initiatives. Strong expertise in SAP S/4HANA security, SAP Fiori authorizations, PFCG roles, authorization objects, and segregation of duties analysis. Experience with SAP BTP security, including role collections, trust configuration, and modern authentication technologies such as SAML, OAuth, and OIDC. Knowledge of SAP Cloud Identity Services (IAS/IPS) and enterprise identity integration with platforms such as Microsoft Entra ID. Understanding of SAP RISE / Private Cloud Edition environments, cloud security principles, and Clean Core architecture. Familiarity with governance and compliance requirements such as GDPR, NIS2, and SOX-related controls. Excellent communication skills and the ability to collaborate with both technical and business stakeholders in an international environment. Fluent English. We're looking for someone who is: Analytical and solution-oriented, with the ability to translate complex requirements into practical designs. A confident communicator who can influence stakeholders without formal authority. Structured, governance-minded, and comfortable operating in audit-sensitive environments. Pragmatic and collaborative, balancing security requirements with business needs. Self-driven and comfortable working in international and distributed teams. What makes this opportunity unique? This role offers a rare opportunity to take ownership of a global SAP authorization strategy at a pivotal moment in Konecranes' SAP transformation journey. You will play a key role in defining and implementing a modern security and authorization framework following our SAP S/4HANA migration. Beyond technology, you will act as a trusted advisor who bridges technical security concepts and business needs, partnering with stakeholders across manufacturing, industrial equipment, finance, procurement, logistics, and order management processes. Your work will have a direct impact on how thousands of users securely access and utilise SAP solutions across our global organisation. Why Konecranes? At Konecranes, you'll join a global leader in material handling solutions and become part of a company committed to innovation, safety, sustainability, and continuous improvement. We offer the opportunity to work on modern SAP technologies, collaborate with highly skilled international teams, and shape solutions that support business operations worldwide. If you're looking for a role where you can make a visible impact, influence strategic decisions, and help define the future of SAP security, we'd love to hear from you. Interested? Apply through the Konecranes Careers site and submit your by 13.09.2026. Please note that we review applications on an ongoing basis and may begin interviews before the application deadline. For further information about the role, please contact: Jochen Menk, Platform Manager, Material Delivery via jochen.menk (at) For recruitment-related questions, please contact: Katre Laan, Global Talent Acquisition Team Lead via katre.laan (at) Konecranes moves what matters . We are a global leader in material handling solutions, serving a broad range of customers across multiple industries. We consistently set the industry benchmark, from everyday improvements to the breakthroughs at moments that matter most, because we know we can always find a safer, more productive and sustainable way. That's why, with 16 000+ professionals in over 50 countries, we are trusted every day to lift, handle and move what the world needs. Konecranes is committed to ensuring that all employees and job applicants are treated fairly in an environment which is free from any form of discrimination. At Konecranes, we believe that great customer experience is built on the people behind the Konecranes name. Everything we do, we do with passion and drive. We believe diversity drives business success and is the foundation for our growth. We welcome different backgrounds and skills that enrich our community and we promote a place where we can ALL be ourselves. This is what makes Konecranes a unique place to work.