SAP Security & Authorisation consultant

What if your next step led further than you thought?

With a reputation built over 150 years, BAM has the depth, scale and momentum to offer you more than a next step. We offer you a path. One that can take you across sectors, into leadership, or even around the world. We invest in development because we want our people to stay and grow. Wherever you want to go, we’ll help you get there.

BAM UK & Ireland are seeking a SAP Security & Authorisation consultant to join us on a 12 month FTC.

• Establish a Fiori authorisation model including spaces/pages, catalogs, groups (if used), and launchpad roles.
• Define SoD control framework and mitigation strategy; embed with Access Control.
• Align security with identity lifecycle (joiner/mover/leaver), role provisioning, and access request workflow.
• Build and maintain PFCG roles for GUI and Fiori, including authorization field values, org-level derivations, start authorizations, and menu/content design.
• Create and execute security test plans (unit, functional integration, UAT, negative testing, penetration tests of roles).
• Run authorisation trace & troubleshooting (e.g., STAUTHTRACE, ST01, SU53, SUIM) and fix defects.
• Prepare cutover access plans (temporary elevated roles, firefighter strategy, emergency access) and hyper‑care support.
• Ensure compliance with audit requirements (SOX/ITGC/etc.), produce evidence packs, and support auditor walkthroughs.
• Document standard operating procedures, role build standards, naming conventions, and governance.
• Develop Security Strategy & Target Role Concept (incl. Fiori mode) and operations pack (SOPs, runbooks, control matrices, audit evidence, training materials).

In addition to an attractive salary, we offer a significant benefits package, contributory pension, BUPA, life assurance, 26 days holiday (plus bank holidays), gym subscription, BAM social club membership and many more exciting benefits.

• 8+ years SAP Security & Authorisations experience, including at least one end-to-end S/4HANA transition (brownfield/greenfield or Central Finance).
• Hands‑on with: PFCG, SU24/SU25, SU53/SUIM, STAUTHTRACE/ST01, SEGW, SICF, /UI2/, /IWFND/, /IWBEP/*, SPRO security setting.
• Strong Fiori knowledge: catalogs, spaces/pages, tiles, target mappings, OData/IWSG, content lifecycle, FLP content management.
• Good understanding of SAP business processes (FI, MM, SD, HR, etc).
• Proven SoD methodology and ruleset tuning.
• Deep knowledge of authorization objects for key S/4HANA areas (FI/CO, MM, SD, CPM/PS).
• Excellent documentation, stakeholder engagement, and ability to challenge and defend a security design diplomatically.

Building a sustainable tomorrow. That’s our mission and our promise at BAM. It’s how we engineer vital infrastructure and construct high‑quality buildings as one of the largest construction companies in Europe.

We strive to create an environment where everybody feels welcome and valued. We’re on an exciting journey to employ the best talent regardless of social background, race, colour, religion, national or ethnic origin, sexual orientation, gender identity or expression, age, disability or other characteristic. xcfaprz

BAM is committed to ensuring a fully inclusive recruitment and onboarding process, so if at any time you feel you may need any reasonable adjustments, do not hesitate to speak with one of our team, and we will do our best to support you. Join us in Making Possible.