SAP Security & Authorisations Engineer

Select how often (in days) to receive an alert:

Salary: £70-77k (dependant on skills & experience)
Location: North Greenwich, London (50% office attendance model)
Contract Type
:
Permanent

Advert closes: Tues Day 18th August 2026

UK Sponsorship not available for this role

The SAP Security & Authorisations Team designs and maintains authorisations and concepts, including segregation of duties management across the TFL Landscape.

The SAP Security & Authorisations ( Senior Application) Engineer will be accountable for the provision of Level 2 (and where appropriate Level
3) service for TfL's environments (business critical services for TfL e.g. asset management, ERP, commercial off the shelf, in-house developed software, transport maintenance and planning systems, online services etc), ensuring that all services are delivered to the agreed standards, quality and performance. Out of Hours support, support of weekend or out of hours maintenance or release activities will be required for certain applications .

To provide Subject Matter Expertise and ensure that the overall technical architecture is sound, verified and validated against business requirements and alignment with TfL’s IS / IT strategy and enterprise architecture. Provisioning of technical security and authorisations support across the highly complex and technical SAP estate in order to mitigate any risk to the business, loss of service availability, consequential loss of revenue associated with security flaws, issues or breaches.

• Responsible for executing support activities to enable fault resolution within the agreed SLAs to ensure the restoration of the services within the team’s portfolio
• Responsible for developing and delivering recommendations to resolve critical defects and manage wider implications of system faults to ensure the restoration/improvement of the service
• Assisting in recommending service and process improvements to ensure effective handling and correction of defects in the TfL environments
• Accountable for resolving incidents and fulfilling Service Requests within SLA targets, which are assigned to themselves, or ensuring they are moved to the correct resolver team
• Escalating service incidents to a higher severity when appropriate to ensure the on-going security and safety of TfL’s business operation and delivery of service within SLAs
• Responsible for Technical Knowledge Management, peer to peer training and knowledge handover to Application Engineers.
• Accountable for assisting Projects and other technical teams to deliver new services / update existing services in their portfolio

• Preferable:
  Extensive Industry experience in an Application Support environment
• Working knowledge of ITIL V3 Service Management
• Knowledge of current/emerging technologies and processes employed in Enterprise Wide IT services
• Knowledge of two or more of the following
• Enterprise Resource Planning, Asset Management Systems, Revenue Collection, Document Management, Real-Time Information Systems, Forms Platforms, Operational Support, Reporting, Monitoring Applications, ITSM Toolsets and integration technologies/systems.
• Knowledge of agile project management methodologies.
• Working knowledge of solutions development methodologies.

• Excellent oral and written communication skills at a business and technical level.
• Highly skilled at solving and communicating complex problems
• Communicates clearly and is skilled at adapting their communication style to meet the needs of the audience.
• Relevant Business Application technical support skills

• Cloud applications, BTP Security, IAS,IAG, IPS, Success Factors, Ariba
• S/4 Hana Roles&Authorisations
• Success Factors
• The application of security roles, design build and support within an SAP implementation
• Competent in SAP Security and Authorisations (Technical and Analysis)
• SAP Application Experience across SD, MM, PP, WM, QM FICO, BW
• Expert in Governance Risk & Compliance (GRC)
• Comprehensive SAP security and user administration technical experience;
• Decision making experience in security and authorisations;
• Experience using security and authorisation transactions including SU01,…