Senior SAP BASIS Security Engineer (Remote)

About the role

The Senior SAP BASIS Security Engineer will administer and secure SAP landscapes by managing user authorizations, security roles, SAP Basis activities, SAP GRC controls, Fiori security, transport management, and compliance with SOX and enterprise security standards.

Responsibilities

• Administer and secure SAP landscapes by managing user authorizations, security roles, SAP Basis activities, SAP GRC controls, Fiori security, transport management, and compliance with SOX and enterprise security standards.
• Support SAP ECC, S/4HANA, and related SAP systems.
• Implement SoD controls and remediation, produce audit-ready documentation and reports, and monitor system logs for unusual activities.
• Monitor and respond to security alerts, conduct root cause analysis, and coordinate with IT security teams for patching and hardening.
• Manage user provisioning, password policies, and SSO (Kerberos, SAML, OAuth).
• Design, build, and maintain composite and single roles, conduct role de-duplication, role testing, and segregation of duties (SoD) analysis.
• Develop and maintain SAP security roles with a focus on Fiori authorizations, ensuring consistency across frontend and backend systems.
• Activate, maintain, and manage security authorizations for backend OData services required by Fiori applications.
• Use scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting.
• Manage multiple security projects, deadlines, and stakeholder expectations.
• Communicate security policies, procedures, and role designs to end users and administrators.

Requirements

• U.S. Citizen
• 8+ years of experience as SAP BASIS Security Engineer/Administrator
• Bachelor's Degree
• In-depth knowledge of SAP authorizations (roles, profiles, authorizations objects)
• Experience with SAP NetWeaver security architecture (ABAP, Java, SAP HANA)
• Understanding of SAP GRC (Access Control, Process Control)
• S/4 Hana & Fiori Security Engineering Methodology Experience
• Experience with standard engineering process
• Background in requirements discovery and translation from business requirements to technical requirements/deliverables
• System & Platform Expertise in administration of SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors
• Experience with SAP Basis components (client administration, transports, system copies)
• Familiarity with SAP Cloud Platform and SAP BTP security services
• User & Role Management Design, build, and maintain composite and single roles
• Conduct role de duplication, role testing, and segregation of duties (SoD) analysis
• User provisioning, password policies, and SSO (Kerberos, SAML, OAuth)
• Build and maintain SAP security roles with a focus on Fiori authorizations, maintaining consistency across frontend and backend systems
• Activate, maintain, and manage security authorizations for backend Odata services required by Fiori applications
• Familiarity with Identity Access Management tools
• Compliance & Auditing Implementation of SoD controls and remediation
• Knowledge of GDPR, SOX, ISO 27001, and other regulatory requirements
• Technical Tools & Utilities: SAP Authorization Management (SU01, PFCG, SU24, SU53, ST01), SAP GRC Access Risk Analysis (ARA), Business Role Management (BRM), Emergency Access Management (EAM), Use of transport tools (CTS, STMS) and change management workflows, Fiori Security Administration (Catalogs, Groups, Spaces, Pages, and Odata services), Troubleshooting tools (ST01/STAUTHTRACE, SU53, SLG1, ST22, /IWFND/ERROR_LOG), ServiceNow or any other incident management tool, Security Incident Management
• Programming & Scripting: Basic ABAP debugging and code review for security related enhancements, Scripting (PowerShell, Bash, Python) for automation of user provisioning and reporting
• Project & Change Management Experience with Agile or Waterfall delivery models
• Communication & Collaboration: Clear documentation of security policies, procedures, and role designs, Ability to liaise with functional, basis, and audit teams, Training end users and administrators on security best practices
• Soft Skills: Strong analytical and problem-solving abilities, Attention to detail and high level of accuracy, Proactive mindset and continuous learning orientation, Collaborative mindset and approach to work

Benefits

Health benefits and 401K are offered.