SAP BASIS Security Engineer / Administrator

No Agencies

No C2C candidates Job Description: TThis role is for a SAP BASIS Security Engineer / Administrator.

The Following Details Required And Desired Skills SAP Security Foundations

• Indepth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security

Engineering Methodology

• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverables
• Experience with software systems design

System & Platform Expertise

• Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
• Management of SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services

User & Role Management

• Design, build, and maintain composite and single roles
• Conduct role deduplication, role testing, and segregationofduties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools

Compliance & Auditing

• Implementation of SoD controls and remediation
• Ability to produce auditready documentation and reports
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation

Technical Tools & Utilities

• SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01)
• SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM)
• Use of transport tools (CTS, STMS) and changemanagement workflows
• Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services
• Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG)
• ServiceNow or any other incident management tool

Security Incident Management

• Monitoring and response to security alerts (e.g., failed logons, suspicious activity)
• Conducting rootcause analysis and remediation for security breaches
• Coordination with IT security teams for patching and hardening

Programming & Scripting

• Basic ABAP debugging and code review for securityrelated enhancements
• Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting

Project & Change Management

• Experience with Agile or Waterfall delivery models
• Ability to manage multiple security projects, deadlines, and stakeholder expectations

Communication & Collaboration

• Clear documentation of security policies, procedures, and role designs
• Ability to liaise with functional, basis, and audit teams
• Training endusers and administrators on security best practices

Soft Skills

• Strong analytical and problemsolving abilities
• Attention to detail and high level of accuracy
• Proactive mindset and continuous learning orientation