Lead - SAP Basis

Role Summary The Assistant Manager - SAP Basis & Security is responsible for leading the administration, security, and governance of SAP systems across hybrid (cloud and on-premises) environments. The role ensures system stability, secure access management, compliance with audit requirements, and seamless integration across SAP applications including S/4HANA, BTP, Ariba, SuccessFactors, and MDG. This position combines technical leadership, operational ownership, and governance accountability, aligned with enterprise-scale SAP landscapes and cybersecurity standards. Key Responsibilities • SAP Basis Administration & Operations • Lead SAP system administration for S/4HANA and related platforms, including monitoring, performance tuning, and troubleshooting • Manage transports, system refreshes, upgrades, patches, and kernel updates • Monitor system health, batch jobs, logs, interfaces, RFCs, and database performance • Coordinate with infrastructure, cloud, and database teams to ensure availability and SLA compliance • SAP Security & Authorization • Design and maintain SAP roles and authorization structures aligned with least privilege and SoD principles • Manage user provisioning, role assignments, and authorization troubleshooting • Conduct user access reviews, emergency access (firefighter), and remediation activities • Provide audit evidence, access reports, and compliance documentation • SAP GRC & Access Governance • Configure and support SAP GRC modules (ARA, ARM, EAM, BRM) • Manage SoD rules, risk analysis, mitigation controls, and workflows • Support SAP IAG for cloud-based access governance across SAP SaaS applications • Lead periodic access certifications and audit remediation activities • SAP Cloud Security (BTP, IAS, IPS, Work Zone) • Administer SAP BTP subaccounts, role collections, destinations, and trust configurations • Configure IAS for SSO, identity federation, and authentication policies • Manage IPS for user and role provisioning across SAP systems • Support Work Zone access control and launchpad content configuration • SAP Application Security (MDG, Ariba, SuccessFactors) • Manage security and access controls across SAP MDG, Ariba, and SuccessFactors • Ensure secure integration between SAP S/4HANA and cloud systems • Support role design, provisioning, and access troubleshooting for business users • Identity & Integration Security • Design and implement SSO using SAML 2.0, OAuth, and IAS/IPS integration • Manage authentication flows across SAP ecosystem (S/4, BTP, SaaS apps) • Troubleshoot federation, certificates, tokens, and login failures • Compliance, Audit & Operations • Ensure adherence to internal security policies, audit requirements, and cybersecurity standards • Support audits with system logs, access controls, and compliance evidence • Participate in incident, change, and problem management processes • Prepare technical documentation and operational procedures Required Skills & Experience • Strong experience in SAP Basis & Security administration • Expertise in SAP S/4HANA authorization and role design • Hands-on experience with SAP GRC Access Control and/or SAP IAG • Experience in SAP BTP security, IAS, IPS, and SSO configurations • Knowledge of integration security (RFC, OAuth, SAML, certificates) • Strong understanding of SoD, audit controls, and compliance frameworks • Experience supporting hybrid SAP environments (cloud + on-premise) Preferred Qualifications • SAP certifications (Basis, Security, GRC, or BTP) • Experience in large-scale SAP transformation programs • Knowledge of SAP Cloud ALM or Solution Manager Soft Skills (Assistant Manager Level) • Leadership mindset with ability to guide teams and vendors • Strong stakeholder communication (business, cybersecurity, and IT) • High ownership and accountability for critical systems • Ability to manage incidents under pressure • Proactive risk identification and continuous improvement focus Education • Bachelor's degree in IT, Computer Science, Engineering, or related field Experience Required • 8-10+ years in SAP Basis & Security • Strong hands-on experience with SAP S/4HANA and SAP cloud security • Experience in GRC/IAG implementation is highly preferred Show more Show less

8-10+ years in SAP Basis & Security; Strong hands-on experience with SAP S/4HANA and SAP cloud security; Experience in GRC/IAG implementation is highly preferred

Lead SAP system administration for S/4HANA and related platforms, including monitoring, performance tuning, and troubleshooting; Manage transports, system refreshes, upgrades, patches, and kernel updates; Monitor system health, batch jobs, logs, interfaces, RFCs, and database performance; Coordinate with infrastructure, cloud, and database teams to ensure availability and SLA compliance; Design and maintain SAP roles and authorization structures aligned with least privilege and SoD principles; Manage user provisioning, role assignments, and authorization troubleshooting; Conduct user access reviews, emergency access (firefighter), and remediation activities; Provide audit evidence, access reports, and compliance documentation; Configure and support SAP GRC modules (ARA, ARM, EAM, BRM); Manage SoD rules, risk analysis, mitigation controls, and workflows; Support SAP IAG for cloud-based access governance across SAP SaaS applications; Lead periodic access certifications and audit remediation activities; Administer SAP BTP subaccounts, role collections, destinations, and trust configurations; Configure IAS for SSO, identity federation, and authentication policies; Manage IPS for user and role provisioning across SAP systems; Support Work Zone access control and launchpad content configuration; Manage security and access controls across SAP MDG, Ariba, and SuccessFactors; Ensure secure integration between SAP S/4HANA and cloud systems; Support role design, provisioning, and access troubleshooting for business users; Design and implement SSO using SAML 2.0, OAuth, and IAS/IPS integration; Manage authentication flows across SAP ecosystem (S/4, BTP, SaaS apps); Troubleshoot federation, certificates, tokens, and login failures; Ensure adherence to internal security policies, audit requirements, and cybersecurity standards; Support audits with system logs, access controls, and compliance evidence; Participate in incident, change, and problem management processes; Prepare technical documentation and operational procedures