ABOUT US

At Hexagon, we don't just measure the world – we define its future. As the general leader in measurement technologies, we provide the confidence that vital industries rely on to build, navigate, and innovate.

From microns to Mars, our solutions drive productivity, quality, safety, and sustainability across aerospace, agriculture, automotive, construction, manufacturing, and mining.

Yet measurement is only the beginning. We bridge the physical and digital worlds with cutting-edge metrology, reality capture, and positioning solutions – making industries and cities safer, smarter, and more sustainable. Looking forward, we are striving to enable our customers to meet sustainability and demographic challenges – ultimately advancing them towards truly autonomous solutions.

Measurement is the foundation of progress. When it has to be right, it has to be Hexagon.

JOB PURPOSE

We are looking for an experienced SAP Security & Authorizations Expert to lead the redesign of our SAP authorization concept and to build a robust, scalable and audit-ready operating model.

You will coordinate the implementation of the selected authorization management solution, working closely with external implementation partners, SAP functional experts, business process owners and key users.

Once the transformation project is complete, you will remain the central point of contact for SAP authorizations. Your main focus will be our SAP ERP / S/4HANA environment, with a growing scope on connected SAP cloud solutions such as SAP BTP.

This is a visible expert role with end-to-end responsibility, combining transformation leadership with long-term ownership. You will shape the future authorization architecture, governance and operating model, rather than only administer an existing setup. You will work in close collaboration with business process owners, SAP specialists, security, audit and external technology partners, and your work will have a direct impact on security, compliance, user experience and the scalability of our SAP environment.

MAIN DUTIES

Authorization redesign and solution implementation

- Lead the SAP authorization redesign project from concept through validation, activation and transition into operations.




- Act as the central interface between the implementation partner, SAP IT, functional teams and business departments.
- Coordinate workshops, requirements clarification, testing, defect resolution, cutover activities and knowledge transfer.
- Design a job-function-based role model and define principles for master and derived roles.
- Drive role build, replication, testing and business validation together with process owners and key users.
- Define and document the target authorization concept, governance model, responsibilities and operating procedures.
- Coordinate the implementation and adoption of the selected authorization management tool, and take ownership of it after go-live.
- Build sustainable internal knowledge on role design, SU24 maintenance and the selected toolset.

Ongoing SAP authorization ownership

- Own and continuously develop the SAP authorization concept.
- Be the central point of contact for new and changed role requirements, working closely with business key users and SAP functional experts.
- Design, maintain, test and implement roles, profiles and authorization objects throughout their lifecycle.
- Own SU24 maintenance and make sure authorization defaults support efficient, consistent and secure role design.
- Govern role assignment and removal processes, and support workflow-related topics for access requests.
- Manage sensitive and emergency access, including firefighter processes and appropriate mitigating controls.
- Perform periodic user-access and role reviews; identify and remediate segregation-of-duties conflicts.
- Prepare for and support internal and external audits on logical access, including control design, documentation, evidence and remediation.
- Monitor authorization-related risks and issues, and report transparently to relevant stakeholders.
- Contribute authorization expertise to projects, releases,



system changes and the adoption of SAP cloud services.

REQUIREMENTS

- Bachelor's degree in information technology, computer science, business administration or a comparable qualification.
- Several years of hands-on experience in SAP security and authorizations, ideally in complex international SAP landscapes.
- Strong practical knowledge of SAP role design, profiles, authorization objects, user administration and role lifecycle management.
- Proven experience in role redesign or authorization transformation projects, and in implementing authorization management or governance tools.
- Solid understanding of role-based access control, segregation of duties, emergency access, mitigating controls, IT general controls and audit requirements.
- Ability to translate business responsibilities into clear, maintainable and compliant authorization roles.
- Strong project coordination and stakeholder-management skills, with the confidence to align IT, business and external partners.
- A structured, analytical and detail-oriented way of working, with a pragmatic focus on implementation and sustainable operations.
- Business-fluent English; German is an advantage.

WHAT WE OFFER

We believe great people do their best work when they have the right environment, support, and flexibility. That's why we offer:

- Competitive remuneration package consisting of a fixed salary and a performance-related bonus.
- Permanent employment contract and stable employment conditions.
- €2,420 net per year in Restaurant Tickets.
- Life insurance fully paid by the company, and the option to apply for private medical insurance with Adeslas at any time.
- A genuinely international and collaborative environment, with more than 33 nationalities represented in our Barcelona office.
- Access to an exclusive employee benefits platform, offering discounts across 50+ brands in fashion, technology, travel, culture, and more.
- €250 gross per year to support internet and other costs related to remote working.
- A flexible hybrid working model designed to support both collaboration and work-life balance.
- Flexible benefits covering areas such as transport, education, and kindergarten.

📌 SAP Authorizations Expert (f/m/d) (Barcelona)
🏢 Hexagon Infrastructure u0026 Geospatial
📍 Barcelona