Role summary
Responsible for leading administration, security, and governance of SAP systems across hybrid (cloud and on-premises) environments. Ensures system stability, secure access management, compliance with audit requirements, and seamless integration across SAP applications. Combines technical leadership, operational ownership, and governance accountability aligned with enterprise-scale SAP landscapes and cybersecurity standards.
Responsibilities
- Lead SAP system administration for S/4HANA and related platforms including monitoring, performance tuning, and troubleshooting
- Manage transports, system refreshes, upgrades, patches, and kernel updates
- Monitor system health, batch jobs, logs, interfaces, RFCs, and database performance
- Coordinate with infrastructure, cloud, and database teams to ensure availability and SLA compliance
- Design and maintain SAP roles and authorization structures aligned with least privilege and SoD principles
- Manage user provisioning, role assignments, and authorization troubleshooting
- Conduct user access reviews, emergency access, and remediation activities
- Provide audit evidence, access reports, and compliance documentation
- Configure and support SAP GRC modules (ARA, ARM, EAM, BRM)
- Manage SoD rules, risk analysis, mitigation controls, and workflows
- Support SAP IAG for cloud-based access governance across SAP SaaS applications
- Lead periodic access certifications and audit remediation activities
- Administer SAP BTP subaccounts, role collections, destinations, and trust configurations
- Configure IAS for SSO, identity federation, and authentication policies
- Manage IPS for user and role provisioning across SAP systems
- Support Work Zone access control and launchpad content configuration
- Manage security and access controls across SAP MDG, Ariba, and SuccessFactors
- Ensure secure integration between SAP S/4HANA and cloud systems
- Support role design, provisioning, and access troubleshooting for business users
- Design and implement SSO using SAML 2.0, OAuth, and IAS/IPS integration
- Manage authentication flows across SAP ecosystem (S/4, BTP, SaaS apps)
- Troubleshoot federation, certificates, tokens, and login failures
- Ensure adherence to internal security policies, audit requirements, and cybersecurity standards
- Support audits with system logs, access controls, and compliance evidence
- Participate in incident, change, and problem management processes
- Prepare technical documentation and operational procedures
Qualifications
- Strong experience in SAP Basis & Security administration
- Expertise in SAP S/4HANA authorization and role design
- Hands-on experience with SAP GRC Access Control and/or SAP IAG
- Experience in SAP BTP security, IAS, IPS, and SSO configurations
- Knowledge of integration security (RFC, OAuth, SAML, certificates)
- Strong understanding of SoD, audit controls, and compliance frameworks
- Experience supporting hybrid SAP environments (cloud and on-premise)
- SAP certifications (Basis, Security, GRC, or BTP)
- Experience in large-scale SAP transformation programs
- Knowledge of SAP Cloud ALM or Solution Manager
- Leadership mindset with ability to guide teams and vendors
- Strong stakeholder communication (business, cybersecurity, and IT)
- High ownership and accountability for critical systems
- Ability to manage incidents under pressure
- Proactive risk identification and continuous improvement focus
Education
Bachelor's degree in IT, Computer Science, Engineering, or related field
Experience
8–10+ years in SAP Basis & Security with strong hands-on experience with SAP S/4HANA and SAP cloud security; experience in GRC/IAG implementation highly preferred
Skills
- SAP Basis administration
- SAP S/4HANA authorization
- SAP GRC Access Control
- SAP IAG
- SAP BTP security
- IAS and IPS configuration
- SSO implementation
- SAML 2.0
- OAuth
- Compliance and audit controls
- Hybrid SAP environments
Education · Experience · Type
Bachelor'sRequires 8+ yearsSalary not stated