£16k
UK jobs. Bigger possibilities.
170,000+ live jobsSAP Security & Authorisations Engineer
Hybrid in London·Added 1 month ago (last checked 5 Nov)
Transport for London
27 open roles
Our summary
- Salary
- £70,000 - £76,000 a year
About £4,260 - £4,550 a month after tax.
- Work mode
- Hybrid, London
- Experience
- 7+ years
- Closing date
- Apply by Thursday 19 November
- Holiday
- 30 days holiday + bank holidays
- Commute
- Cycle to work scheme
Skills
Nice to have
Pay & benefits
What you'll get
- Final salary pension scheme
- Free travel for you on the TfL network
- Reimbursement of 75% of the cost of a standard class Ticket for National Rail travel from home or 75% reimbursement on a 28-day flexi ticket
- 30 days annual leave plus public and bank holidays
- TfL is committed to work-life balance, operating a hybrid working approach where business and role requirements allow
- Private healthcare discounted scheme (optional)
- Tax-efficient cycle-to-work programme
- Retail, health, leisure and travel offers
- Discounted Eurostar travel and much more!
Additional Information
Please apply supplying your CV preferably in ".docx" format. This document should be A4, in Arial 12 font, and a maximum of 2 pages per document.
If you are shortlisted you may be invited to take part in a Video interview. We endeavour to give candidates as much notice as possible however some interviews/ assessments will be organised at short notice and will require a degree of flexibility. We reserve the right to close the application window early if we receive a high volume of suitable applications.
The role
Transport for London is one of the world's largest and most complex transport authorities. Every day, our technology supports vital services across London's Underground, bus, rail, tram and light-rail networks - connecting communities, supporting the economy and helping millions of customers travel around the capital.
We are looking for an experienced SAP Security and Authorisations Engineer to join us at an exciting point in TfL's technology journey.
This is more than a traditional SAP support role. Alongside protecting and improving our existing business-critical SAP estate, you will have the opportunity to contribute to TfL's transition to SAP S/4HANA and the continued development of our cloud security landscape.
You will work with technologies including SAP GRC, SAP BTP, IAS, IAG, IPS, SuccessFactors and Ariba, gaining exposure to a broad and evolving SAP environment. Your expertise will help us strengthen security, modernise our platforms and build sustainable services that support London for years to come.
What you'll do
As part of TfL's specialist SAP Security and Authorisations team, you will design, build, maintain and support security roles and authorisation concepts across our SAP landscape.
You will provide Level 2 and, where appropriate, Level 3 support for business-critical services. You will also work with project teams, technical specialists, suppliers and business stakeholders to introduce new capabilities, resolve complex security issues and improve the way our services operate.
The role offers the opportunity to combine hands-on SAP security work with involvement in major transformation activity. You will be able to broaden your knowledge across on-premise and cloud SAP solutions while contributing directly to TfL's future security and authorisation model.
UK Sponsorship not available for this role
Salary: £70-76k (dependant on skills & experience)
Location: North Greenwich, London (50% office attendance model)
Contract Type: Permanent
Advert closes: Thursday 19th November 2026 at 23.59
What you will be doing
- Analyse and resolve complex SAP security incidents, access requests, authorisation errors, SoD conflicts, GRC workflow issues and user provisioning problems across SAP and connected services.
- Support role design, role changes, access reviews, emergency access monitoring, GRC reporting, audit evidence gathering, testing and controlled release activity for SAP security changes.
- Support SAP security configuration activity, including single, composite and derived role changes, role-based permission updates, access request validation, security regression testing and secure transport preparation across SAP ECC, S/4HANA, Fiori, SuccessFactors and SAP BTP environments.
- Run and interpret standard SAP authorisation checks, trace outputs and error evidence, including SU53 and ST01 outputs where appropriate, to diagnose missing authorisations, access defects, role conflicts and multi-system security issues.
What we are looking for
You will bring a minimum of 7 years hands-on experience in SAP security and authorisations, gained within complex, business-critical environments.
Essential experience
You should have strong hands-on experience across most of the following areas:
- SAP security role design, build, testing and support.
- SAP user and role administration, including composite and derived roles.
- Hands-on experience of SAP Governance, Risk and Compliance, including access-risk analysis, emergency access management and segregation-of-duties concepts.
- Security support across SAP business applications such as SD,MM, PP, FI/CO or BW.
- HR authorisations and structural profiles.
- Analysing security issues and making risk-based decisions.
- Supporting incidents, problems and service requests within agreed SLAs.
- Working collaboratively with technical teams, business stakeholders and external delivery partners.
- SAP S/4HANA security, roles and authorisations.
- SAP BTP security and role collections.
- SAP IAS, IAG and IPS.
- SAP SuccessFactors and SAP Ariba security.
- Central User Administration (CUA).
- Agile delivery or solution-development methodologies.
About Transport for London
- Industry
- Transport
In their own words
Additional information
We are committed to equality, diversity and inclusion and aim to reflect the diverse communities we serve. We believe that a diverse workforce enables us to deliver better services and outcomes. Our goal is to make our recruitment as inclusive as possible. As a Disability Confident Leader, we actively encourage applications from disabled people. As part of the Disability Confident scheme, we aim to offer an assessment or interview to candidates who apply via the scheme where the minimum essential criteria for skills, knowledge and experience has been met. In some circumstances, it may not be practical to offer an interview or assessment to every candidate who applies through the scheme and meet the minimum essential criteria; in these situations, we select candidates who best meet the minimum criteria for the job rather than interviewing all who meet them.
Across all recruitment activity, we recognise that selection methods may vary depending on the nature and scale of the campaign and will be applied fairly, consistently and proportionately in line with our Disability Confident commitments.
Many of our staff work flexibly in many different ways. Please talk to us at interview about the flexibility you need. We'll see what we can do.
We understand a confidence gap can get in the way of meeting spectacular candidates. So please don't hesitate to apply if you think you have what it takes even if you feel you don't meet all the criteria. We'd love to hear from you.
At Transport for London, safety, trust and fairness sit at the heart of how we recruit. Our Vetting Charter (https://tfl.gov.uk/corporate/careers/our-vetting-process) explains the checks we carry out before you join us, helping ensure we create a safe, inclusive and reliable network for everyone who depends on our services. We simply ask that the information you provide is honest and accurate so we can progress your application smoothly. If something doesn't match or can't be verified, we may not be able to move forward with your application but we'll always treat you with transparency, respect and clear communication throughout.