SAP Security & Authorisations Engineer in London

Salary: £70-77k (dependant on skills & experience)

Location: North Greenwich, London (50% office attendance model)

Contract Type: Permanent

Advert closes: Tuesday 18th August 2026 at 23.59

UK Sponsorship not available for this role

Overview of project/role

The SAP Security & Authorisations Team designs and maintains authorisations and concepts, including segregation of duties management across the TFL Landscape. The SAP Security & Authorisations (Senior Application) Engineer will be accountable for the provision of Level 2 (and where appropriate Level 3) service for TfL's environments (business critical services for TfL e.g. asset management, ERP, commercial off the shelf, in-house developed software, transport maintenance and planning systems, online services etc), ensuring that all services are delivered to the agreed standards, quality and performance. Out of Hours support, support of weekend or out of hours maintenance or release activities will be required for certain applications.

To provide Subject Matter Expertise and ensure that the overall technical architecture is sound, verified and validated against business requirements and alignment with TfL’s IS / IT strategy and enterprise architecture. Provisioning of technical security and authorisations support across the highly complex and technical SAP estate in order to mitigate any risk to the business, loss of service availability, consequential loss of revenue associated with security flaws, issues or breaches.

Key Accountabilities

• Responsible for executing support activities to enable fault resolution within the agreed SLAs to ensure the restoration of the services within the team’s portfolio.
• Responsible for developing and delivering recommendations to resolve critical defects and manage wider implications of system faults to ensure the restoration/improvement of the service.
• Assisting in recommending service and process improvements to ensure effective handling and correction of defects in the TfL environments.
• Accountable for resolving incidents and fulfilling Service Requests within SLA targets, which are assigned to themselves, or ensuring they are moved to the correct resolver team.
• Escalating service incidents to a higher severity when appropriate to ensure the on-going security and safety of TfL’s business operation and delivery of service within SLAs.
• Responsible for Technical Knowledge Management, peer to peer training and knowledge handover to Application Engineers.
• Accountable for assisting Projects and other technical teams to deliver new services / update existing services in their portfolio.

Knowledge

• Preferable: Extensive Industry experience in an Application Support environment.
• Working knowledge of ITIL V3 Service Management.
• Knowledge of current/emerging technologies and processes employed in Enterprise Wide IT services.
• Knowledge of two or more of the following: Enterprise Resource Planning, Asset Management Systems, Revenue Collection, Document Management, Real-Time Information Systems, Forms Platforms, Operational Support, Reporting, Monitoring Applications, ITSM Toolsets and integration technologies/systems.
• Knowledge of agile project management methodologies.
• Working knowledge of solutions development methodologies.

Skills

• Excellent oral and written communication skills at a business and technical level.
• Highly skilled at solving and communicating complex problems.
• Communicates clearly and is skilled at adapting their communication style to meet the needs of the audience.
• Relevant Business Application technical support skills.

Technical:

• Cloud applications, BTP Security, IAS, IAG, IPS, SuccessFactors, Ariba, S/4 Hana Roles & Authorisations.
• The application of security roles, design build and support within an SAP implementation.
• Competent in SAP Security and Authorisations (Technical and Analysis).
• SAP Application Experience across SD, MM, PP, WM, QM, FICO, BW.
• Expert in Governance Risk & Compliance (GRC).
• Comprehensive SAP security and user administration technical experience.
• Decision making experience in security and authorisations.
• Experience using security and authorisation transactions including SU01, SU10, SUIM, SU53, PFCG, and SU24.
• Central User Administration (CUA) transactions, SCUA, SCUL, SCUM.
• Role Administration, to include composite and derived roles.
• HR authorisations and structural profiles.
• Strong understanding of SAP security and authorisations interaction between the mySAP ERP suite of applications.

Experience

• Demonstrable experience of working in a complex multi site environment dealing with business applications and real time implementation systems.
• Proven track record of working within a support or operations environment.
• Well developed experience of issues and incident management and working within agreed SLAs.

Excellent Benefits include:

• Final salary pension scheme.
• Free travel for you on the TfL network.
• Reimbursement of 75% of the cost of a standard class Ticket for National Rail travel from home or 75% reimbursement on a 28-day flexi ticket.
• 30 days annual leave plus public and bank holidays.
• TfL is committed to work-life balance, operating a hybrid working approach where business and role requirements allow.
• Tax-efficient cycle-to-work programme.
• Retail, health, leisure and travel offers.
• Discounted Eurostar travel and much more!

Equality, diversity and inclusion

We are committed to equality, diversity and inclusion and aim to reflect the diverse communities we serve. We believe that a diverse workforce enables us to deliver better services and outcomes. Our goal is to make our recruitment as inclusive as possible. As a Disability Confident Leader, we actively encourage applications from disabled people. As part of the Disability Confident scheme, we aim to offer an assessment or interview to candidates who apply via the scheme where the minimum essential criteria for skills, knowledge and experience has been met. In some circumstances, it may not be practical to offer an interview or assessment to every candidate who applies through the scheme and meets the minimum essential criteria; in these situations, we select candidates who best meet the minimum criteria for the job rather than interviewing all who meet them.

Across all recruitment activity, we recognise that selection methods may vary depending on the nature and scale of the campaign and will be applied fairly, consistently and proportionately in line with our Disability Confident commitments. Many of our staff work flexibly in many different ways. Please talk to us at interview about the flexibility you need. We'll see what we can do.

At Transport for London, safety, trust and fairness sit at the heart of how we recruit. Our Vetting Charter explains the checks we carry out before you join us, helping ensure we create a safe, inclusive and reliable network for everyone who depends on our services. We simply ask that the information you provide is honest and accurate so we can progress your application smoothly. If something doesn’t match or can’t be verified, we may not be able to move forward with your application but we’ll always treat you with transparency, respect and clear communication throughout.