I am Olegas Matiušovas, Hiring Manager, and I am leading SAP Platform Services team of Telia Group IT. I am looking for strengthening our SAP Platforms technical team and bringing in SAP Roles & Authorizations specialist to help us out with all the exciting work we do! If you have experience managing SAP ABAP roles and authorizations or SAP BTPEA IAM hands-on practice – we need you.
This role will be responsible for end‑to‑end ownership of SAP security, roles and authorisations, and access management across on‑premise and SAP cloud landscapes, including SAP BTP (BTPEA), ensuring secure, compliant, and efficient user access through strong governance, identity integration, and expert support of operations, projects, and audits.
SAP Roles & Authorizations specialist role will have to ensure reliable day‑to‑day access operations by governing role and authorisation concepts across on‑premise and cloud environments for the Nordic countries (Sweden, Finland, Norway and Denmark).
The role will require close collaboration with Solution Architects, Product Owners, functional SAP teams, security, integration teams, and external partners, as well as coordination with the IT Service Manager for the relevant responsibility area.
What you’ll do
Manage end‑to‑end SAP user access and authorisations across on‑premise and cloud SAP systems (e.g. S/4HANA, SAP BW, SAP BTP, CloudALM).
Perform user administration activities including user provisioning, de‑provisioning, role assignments, and emergency access (Firefighter) management.
Handle day‑to‑day access‑related incidents and service requests, including troubleshooting authorisation issues and resolving access errors within agreed OLAs.
Take ownership of minor, major, and critical security‑related incidents; perform root cause analysis and document resolutions and preventive measures.
Support SAP change, release, and transport processes by ensuring roles and authorisations are properly tested and transported across environments.
Collaborate closely with SAP Basis, functional, integration, and development teams to support testing, deployments, and production releases.
Support compliance, audit, and segregation‑of‑duties (SoD) activities, including audit evidence preparation, access reviews, and remediation actions.
Configure and maintain access control processes and tools (e.g. SAP GRC Access Control, firefighter processes, workflow approvals).
Support SAP cloud identity and access management integrations (e.g. SAP IAS/IPS, Azure AD, SSO, user synchronization).
Contribute to continuous improvement of SAP security, access governance, and lifecycle management processes.
Support project and enhancement initiatives, including role redesign, testing (UT, SIT, UAT), documentation, and go‑live stabilisation.
Work according to ITIL practices, SAP security standards, and agile delivery frameworks (e.g. SAFe), using tools such as ServiceNow and JIRA.
What will help you thrive in this role
2+ years of hands‑on experience in SAP Roles & Authorisations / SAP Security.
Hands-on experience of SAP authorisation concepts (PFCG roles, composite roles, derived roles, authorisation objects).
Experience managing access in SAP on‑premise systems (ECC, S/4HANA, BW) and SAP cloud solutions (e.g. BTP, Analytics Cloud).
Practical experience with SAP GRC Access Control (access requests, SoD analysis, firefighter functionality) or similar access governance tools.
Familiarity with identity and access management concepts, including SSO, user provisioning, and directory integration (e.g. Azure AD, SAP IAS/IPS).
Fluent in English (written and spoken).
Strong analytical and problem‑solving skills with a proactive, security‑focused, service‑oriented mindset.
Excellent communication skills to interact with technical teams, business users, auditors, and stakeholders.
Flexibility to take part in on‑call duty (24/7 service coverage) and support business‑critical access incidents outside regular working hours when required.
Join us to shape smarter living for people, businesses, and the planet
At Telia, we’re a team of 15 000 colleagues across the Nordics and Baltics, passionate about technology and connectivity. As a Top Employer and Sustainability Leader, we drive change with large-scale, impactful projects while building a sustainable, inclusive world.
Here, you can grow your skills, lead meaningful projects, and thrive in a supportive, diverse environment. Whether you’re taking your first step or your next, Telia is a place to grow, belong, and make a real impact.
What we offer
At Telia, we care about your well-being, growth, and sense of belonging:
Additional health insurance and pension plans
Workation: work from anywhere in the EU for up to 30 days per year
Extra vacation days based on tenure (up to 5 additional days)
Discounts on Telia services, including free home internet
Partner offers and discounts (SPA, cafes, events)
Telia Kids Club: summer camps for employees’ children
Company-supported sports activities (yoga, basketball, running) and more.
Monthly salary range for this position - 3600 - 5400 Eur (gross) + annual performance bonuses. Although it may vary depending on your skills and experience.
Ready to make better happen?
If you’re selected for the next stage, you’ll be contacted by our Hiring Manager. Background and reference checks will be part of the process.
Equal opportunities
At Telia, we recognize talent by professional skills and growth potential. We champion diversity, ensuring every individual’s needs are met, regardless of disability, gender, age, nationality, sexual orientation, or social status. Together, we’re dedicated to fostering an inclusive work environment where your uniqueness is our strength.
Join us and let’s make better happen - together!
More about our culture: www.telia.lt/karjera