About the RoleThis role owns the health and security of Barton Malow's SAP environment end to end. You'll administer and secure systems across our S/4HANA PCE landscape (development, quality assurance, and production), and Employee Central Payroll, while working closely with our hosting partner on infrastructure operations. You'll be the go-to expert for SAP security architecture, authentication, and authorization - designing access models that protect the business without slowing it down.
What You'll Do- Administer SAP Basis operations across S/4HANA PCE (development, quality assurance, and production), and Employee Central Payroll, coordinating closely with our hosting partner on infrastructure, system landscape changes, and Basis support
- Design, implement, and maintain SAP security architecture, including roles, authorizations, and segregation-of-duties controls across the SAP landscape
- Configure and support single sign-on and secure authentication using SAP Cloud Identity Services (Identity Authentication), SAP Secure Login Service, CommonCryptoLib, and SNC, including X.509 certificate-based mapping via STRUST and CERTRULE
- Manage system landscape activities including transports, client administration, kernel and support package upgrades, and system refreshes
- Monitor system performance and availability, and lead root-cause analysis on Basis-level issues, short dumps, and integration failures
- Partner with our hosting and infrastructure partner on network, firewall, and connectivity changes affecting the SAP landscape
- Maintain compliance with internal security policy and support audit and access-review activities
- Document system architecture, security models, and operational procedures to support a growing, well-governed SAP environment
What You Bring- 5+ years of hands-on SAP Security & Basis administration experience, including S/4HANA or ECC environments
- Strong working knowledge of SAP security concepts - roles, authorization objects, profile generator (PFCG), and segregation of duties
- Experience with SAP authentication and single sign-on technologies such as SNC, Secure Login Service, SAML, or SAP Cloud Identity Services
- Familiarity with SAP HANA database administration and SQL
- Familiarity with SAP BTP subaccount management and cloud integration concepts
- Comfort working across a hosted or partner-managed infrastructure model (RISE with SAP or similar)
- Strong troubleshooting skills, including the ability to trace issues from application-layer symptoms back to root cause
- Clear communicator who can work across technical and business teams and document decisions for future reference
Nice to Have- Experience with SAP SuccessFactors or Employee Central Payroll
- Exposure to SAP Datasphere, SAP Analytics Cloud, or SAP Integration Suite
- Experience supporting RISE with SAP or cloud-hosted PCE environment
Barton Malow has spent more than a century building trust-based relationships and delivering value for clients and communities. Joining our Technology team means working on a modern, evolving SAP landscape with the support of a company that invests in the tools and people who keep it running.
