SAP BASIS Security Engineer / Administrator

Desired Skills

• SAP Security Foundations: In-depth knowledge of SAP authorizations (roles, profiles, authorization objects); experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA); understanding of SAP GRC (Access Control, Process Control); S/4HANA & Fiori security.
• Engineering Methodology: Experience with standard engineering process; background in requirements discovery and translation from business requirements to technical requirements/deliverables; experience with software systems design.
• System & Platform Expertise: Administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors; management of SAP Basis components (client administration, transports, system copies); familiarity with SAP Cloud Platform and SAP BTP security services.
• User & Role Management: Design, build, and maintain composite and single roles; conduct role deduplication, role testing, and segregation-of-duties (SoD) analysis; user provisioning, password policies, and SSO (Kerberos, SAML, OAuth).
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems.
• Activate, maintain, and manage security authorizations for backend OData services required by Fiori applications.
• Familiarity with Identity Access Management tools.
• Compliance & Auditing: Implementation of SoD controls and remediation; ability to produce audit-ready documentation and reports; knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements; ability to monitor and assess system logs for unusual activities and collaborate on system vulnerability remediation.
• Technical Tools & Utilities: SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01); SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM); use of transport tools (CTS, STMS) and change-management workflows; Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and OData services); troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG); ServiceNow or any other incident management tool.
• Security Incident Management: Monitoring and response to security alerts (e.g., failed logons, suspicious activity); conducting root-cause analysis and remediation for security breaches; coordination with IT security teams for patching and hardening.
• Programming & Scripting: Basic ABAP debugging and code review for security-related enhancements; scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting.
• Project & Change Management: Experience with Agile or Waterfall delivery models; ability to manage multiple security projects, deadlines, and stakeholder expectations.
• Communication & Collaboration: Clear documentation of security policies, procedures, and role designs; ability to liaise with functional, basis, and audit teams; training end-users and administrators on security best practices.
• Soft Skills: Strong analytical and problem-solving abilities; attention to detail and high level of accuracy; proactive mindset and continuous learning orientation.