Senior Security & Authorization Engineer (SAP S/4 & SAP BTP) (Ciudad de México, Ciudad de México, CR)
About this opportunity
Senior Security & Authorization Engineer
TASKS AND RESPONSIBILITIES
Design, develop, and maintain authorization concepts and role structures within SAP S/4HANA and SAP BTP, ensuring alignment with business requirements and compliance standards (e.g., GxP, ICS/GISC).
Lead the end-to-end lifecycle of SAP roles, from requirements gathering and concept design through build, testing, and ongoing maintenance.
Manage and continuously improve user administration processes and authorization-related procedures within SAP S/4HANA and SAP BTP.
Collaborate closely with the CORE S/4HANA Program and its Security & Authorization Team to ensure authorization requirements are effectively integrated into program initiatives and release cycles.
Administer and develop identity management processes using SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW, and Pathlock Cloud.
Support compliance & governance activities, including security assessments and audits, with a focus on authorization risks and segregation of duties (SoD).
Provide expertise and act as a key point of contact for authorization and role design inquiries across IT Operations and business teams.
Stay current on SAP BTP and S/4HANA authorization best practices, including SAP's embedded AI capabilities, and leverage AI-powered tools (e.g., ChatGPT, Claude, Copilot) to enhance delivery quality and efficiency.
WHO YOU ARE
Bachelor’s degree in computer science, Information Technology, or related field, or equivalent work experience.
8+ years of experience in SAP Security & Authorization, with a strong focus on role design and authorization concept development in SAP S/4HANA and SAP BTP, ideally in a regulated (GxP) environment.
Deep knowledge of SAP authorization concepts, role design methodologies, and best practices within SAP S/4HANA and SAP BTP.
Hands-on experience with SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW, and Pathlock Cloud.
Understanding compliance frameworks and industry standards (GxP, ICS/GISC, SoD).
Experience with DevOps and Agile methodologies.
Comfortable using AI-powered tools (ChatGPT, Claude, Copilot, or similar) as part of your daily workflow.
Excellent problem-solving and communication skills; experience in international or cross-cultural teams is highly desirable.
Security certifications (CISSP, CISM, CISA) are a plus.
Fluent in English (required). Portuguese and German are an additional advantage.
At Bayer we believe in diversity, equity and inclusion. We aim to create an environment in which everybody can feel authentic, respected and equally valued. Every day we strive to reflect our values through our unique capabilities, self-experiences, and aspirations. We intentionally seek diversity, to enable our people to bring their fullest potential out and encourage others to likewise do so. Our company wins when we leverage our capabilities to lead the cultural transformation in our business, positively impacting society.
Candidates who meet the requirements based on the job profile will be considered for employment regardless of physical disability, race, color, religion, sex, age, sexual orientation, gender identity and will not be at a disadvantage if unemployed.
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 592 comparable Senior Information Technology roles across 56 biopharma companies.
Salary context
75 of 592 peers report a salary range (USD, annualized)
Peers share this role's job function and a matching or adjacent seniority level -- not necessarily the same therapeutic area or country.
Where these roles are based
Top locations among the 592 comparable roles
+ 25 more countries
Seniority mix
592 of 592 peers have a known seniority level
Therapeutic area mix
4 of 592 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
Notify me about similar jobs
Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.
Or follow a whole field: get every new Information Technology job in Costa Rica, and choose locations and companies.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.