This role is for a SAP BASIS Security Engineer / Administrator.
The following details required and desired skills:
SAP Security Foundations
• In-depth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security
Engineering Methodology
• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
• Experience with software systems design
System & Platform Expertise
• Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
• Management of SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services
User & Role Management
• Design, build, and maintain composite and single roles
• Conduct role de-duplication, role testing, and segregation-of-duties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools
Compliance & Auditing
• Implementation of SoD controls and remediation
• Ability to produce audit-ready documentation and reports
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation
Technical Tools & Utilities
• SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
• SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
• Use of transport tools (CTS, STMS) and change-management workflows
• Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
• Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG)
• ServiceNow or any other incident management tool
Security Incident Management
• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting root-cause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening
Programming & Scripting
• Basic ABAP debugging and code review for security-related enhancements
• Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
Project & Change Management
• Experience with Agile or Waterfall delivery models
• Ability to manage multiple security projects, deadlines, and stakeholder expectations
Communication & Collaboration
• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training end-users and administrators on security best practices
Soft Skills
• Strong analytical and problem-solving abilities
• Attention to detail and high level of accuracy
• Proactive mindset and continuous learning orientation
• Collaborative mindset and approach to work
