SAP Security and Basis Administrator 1

About the role

This role owns the health and security of Barton Malow's SAP environment end to end. You'll administer and secure systems across our S/4HANA PCE landscape (development, quality assurance, and production), and Employee Central Payroll, while working closely with our hosting partner on infrastructure operations. You'll be the go-to expert for SAP security architecture, authentication, and authorization — designing access models that protect the business without slowing it down.

Responsibilities

• Administer SAP Basis operations across S/4HANA PCE (development, quality assurance, and production), and Employee Central Payroll, coordinating closely with our hosting partner on infrastructure, system landscape changes, and Basis support
• Design, implement, and maintain SAP security architecture, including roles, authorizations, and segregation-of-duties controls across the SAP landscape
• Configure and support single sign-on and secure authentication using SAP Cloud Identity Services (Identity Authentication), SAP Secure Login Service, CommonCryptoLib, and SNC, including X.509 certificate-based mapping via STRUST and CERTRULE
• Manage system landscape activities including transports, client administration, kernel and support package upgrades, and system refreshes
• Monitor system performance and availability, and lead root-cause analysis on Basis-level issues, short dumps, and integration failures
• Partner with our hosting and infrastructure partner on network, firewall, and connectivity changes affecting the SAP landscape
• Maintain compliance with internal security policy and support audit and access-review activities
• Document system architecture, security models, and operational procedures to support a growing, well-governed SAP environment

Requirements

• 5+ years of hands-on SAP Security & Basis administration experience, including S/4HANA or ECC environments
• Strong working knowledge of SAP security concepts — roles, authorization objects, profile generator (PFCG), and segregation of duties
• Experience with SAP authentication and single sign-on technologies such as SNC, Secure Login Service, SAML, or SAP Cloud Identity Services
• Familiarity with SAP HANA database administration and SQL
• Familiarity with SAP BTP subaccount management and cloud integration concepts
• Comfort working across a hosted or partner-managed infrastructure model (RISE with SAP or similar)
• Strong troubleshooting skills, including the ability to trace issues from application-layer symptoms back to root cause
• Clear communicator who can work across technical and business teams and document decisions for future reference

Nice to Have

• Experience with SAP SuccessFactors or Employee Central Payroll
• Exposure to SAP Datasphere, SAP Analytics Cloud, or SAP Integration Suite
• Experience supporting RISE with SAP or cloud-hosted PCE environment

Why Barton Malow

Barton Malow has spent more than a century building trust-based relationships and delivering value for clients and communities. Joining our Technology team means working on a modern, evolving SAP landscape with the support of a company that invests in the tools and people who keep it running.