Cloud Platform Administrator, SAP S/4HANA

Job Responsibilities

• Identity & Access Management (IAM)
• Manage user onboarding, role assignment, access changes, and offboarding through SAP Fiori administration apps.
• Design, build, and transport business roles from the Development/Quality tenant into Production; enforce the policy that business role changes are never made directly in the Production system.
• Manage SAP Cloud Identity Services (IAS/IPS) for identity provider configuration and automated user provisioning from HR systems or Microsoft Entra ID.
• Configure and maintain Single Sign-On (SSO) integration between SAP IAS and Gardner-White's corporate identity provider (SAML 2.0 / OIDC), ensuring seamless access across S/4HANA Cloud, SAP BTP, and integrated applications.
• Conduct periodic access reviews, identify privilege creep, and enforce Segregation of Duties (SoD) principles using SAP's IAM audit and compliance apps.
• Configure and enforce Multi-Factor Authentication (MFA) policies aligned with Gardner-White's security standards.
• Transport & Change Management
• Manage software collections and the full transport lifecycle from Development through Quality to Production for configuration artifacts, business roles, key user extensions, and custom developments.
• Understand and manage the transport paths across Gardner-White’s landscape, including CBC/ATO (Adaptation Transport Organizer) for configuration, gCTS / ABAP Cloud transport pipeline for developer extensions, Software Collections for key user changes and business roles, and cTMS for BTP-hosted artifacts.
• Establish and enforce change management governance: ensure all changes flow through the proper landscape path, with adequate testing and stakeholder sign-off before production deployment.
• Partner with the ERP analyst team to coordinate release windows and minimize operational disruption during transports.
• Landscape & Tenant Administration
• Serve as Gardner-White's primary liaison with SAP for all landscape provisioning activities including system refreshes, tenant copies, sandbox requests, and change requests submitted through the SAP portal.
• Manage the 3-system landscape (Development, Quality, Production) in SAP Cloud ALM Landscape Management, maintaining accurate system registration and service key management.
• Oversee SAP Central Business Configuration (CBC) project setup, scope activation, and configuration project coordination across tenants.
• Coordinate test data refresh activities in the Quality system and ensure non-production environments are kept current for testing and validation purposes.
• Manage S-user IDs, SAP support portal access, and the Gardner-White global account entitlements within the SAP BTP Cockpit.
• Integration & Communication Management
• Create and maintain Communication Systems and Communication Arrangements in SAP S/4HANA Cloud to support inbound/outbound API integrations (DataXstream OMS+, SAP OPPS, consumer financing systems, last-mile/delivery platforms, EDI, and other third-party connectors).
• Administer SAP BTP subaccounts, service entitlements, and integration flows; manage the BTP Cockpit for all service plan assignments and entitlements required by Gardner-White's landscape.
• Maintain documentation of all communication arrangements, API endpoints, OAuth clients, and integration certificates, including certificate renewal schedules.
• SAP Cloud ALM Operations & Monitoring
• Configure and maintain SAP Cloud ALM for Operations: set up Application Monitoring, Business Process Monitoring, and Integration & Exception Monitoring for the Gardner-White SAP landscape.
• Maintain the SAP Cloud ALM service key, manage the connection between S/4HANA Cloud tenants and the ALM tenant, and ensure monitoring coverage is active post-upgrade.
• Use SAP Cloud ALM Implementation features (Requirements, Test Management, Deployment) during project phases to support the project team.
• Upgrade & Continuous Delivery Management
• Own Gardner-White’s semi-annual SAP upgrade cycle (February and August major releases): communicate upgrade timelines to stakeholders 6 weeks in advance, coordinate content upgrade scheduling in the Quality system, coordinate regression testing with the ERP analyst team using the Test Automation Tool, and manage the production upgrade window.
• Review SAP release notes, What's New content, and customer-specific upgrade impact assessments; summarize relevant functional and technical changes for the ERP analyst team and business stakeholders.
• Manage maintenance windows and scheduled downtimes in coordination with SAP and internal IT teams.
• Ensure all extensions, integrations, and communication arrangements are tested and verified compatible after each major release upgrade before production cutover; monitor bi-weekly Hotfix Collection (HFC) deployments for corrections and Continuous Delivery Service (CDS) innovations between major releases.
• Extensibility Oversight
• Govern Gardner-White’s extensibility strategy across all three layers: in-app key user extensibility (custom fields, layouts, Custom Logic), developer extensibility via ABAP Cloud, and side-by-side extensibility through BTP-hosted apps and APIs.
• Manage the Extensibility Cockpit; ensure all custom developments are tracked, documented, tested across the landscape, and properly transported to Production.
• Validate that extensions remain stable and compliant through each semi-annual major release upgrade; work with developers or SAP Services to remediate any deprecated APIs or compatibility issues.
• Security, Compliance & Data Governance
• Configure and monitor Read Access Logging (RAL) for sensitive data fields in compliance with GDPR, PCI, and Gardner-White data governance policies.
• Manage the Audit Log Viewer to track configuration changes, user activities, and security-relevant events; retain logs per policy requirements.
• Implement Information Lifecycle Management (ILM) rules for data archiving and retention in compliance with regulatory and business requirements.
• Serve as the internal point of contact for SAP security-related SAP Notes, vulnerability patches, and compliance advisories; assess applicability and coordinate remediation.
• SAP Support Engagement & Vendor Management
• Create, manage, and prioritize SAP support Cases, Service Requests, and Change Requests via SAP for Me on behalf of Gardner-White, ensuring issues are properly classified and escalated when SLAs are at risk.
• Maintain a working relationship with the Gardner-White SAP Customer Engagement Manager (CEM) and SAP Enterprise Architect; participate in scheduled governance calls and SAP advisory sessions.
• Monitor SAP Notes, KBAs, and security advisories relevant to the Gardner-White landscape; assess applicability, communicate impacts to the team, and open support cases when action is needed.
• Documentation & Knowledge Management
• Maintain a comprehensive system administration runbook including landscape diagrams, integration architecture, user provisioning procedures, transport procedures, upgrade playbooks, and escalation contacts.
• Document all custom configurations, role designs, and deviation from SAP standard in a structured format accessible to the Business Systems team.
• Develop training materials for ERP analysts and key users on administrative tasks, Fiori app usage, and self-service capabilities.

Qualifications

• 3+ years of SAP system administration experience; direct experience with SAP S/4HANA Cloud Public Edition strongly preferred, or demonstrated experience administering an equivalent cloud ERP platform (SAP BTP, Oracle Fusion Cloud, Workday, or comparable SaaS ERP).
• Direct experience with SAP Cloud Identity Services (IAS/IPS), including SSO configuration and corporate IdP integration with Azure AD / Microsoft Entra ID.
• Working knowledge of SAP Business Technology Platform (BTP): BTP Cockpit navigation, subaccount management, service entitlements, and Cloud Foundry or Kyma runtime basics.
• Experience with SAP transport management in a cloud environment, including Software Collections, SAP Cloud Transport Management Service (cTMS), and release governance.
• Strong understanding of SAP role-based authorization concepts: Business Roles, Business Catalogs, restriction types, and SoD principles in the Public Cloud IAM model.
• Experience creating and managing SAP Communication Systems, Communication Arrangements, and API-based integrations.
• Familiarity with SAP Cloud ALM for both implementation and operations use cases.
• Strong analytical and troubleshooting skills for diagnosing integration failures, authorization errors, and system configuration issues.
• Ability to communicate technical topics clearly to non-technical stakeholders, and to keep documentation accurate and current.