Lead - SAP Basis

Role Overview

The Assistant Manager - SAP Basis & Security leads the administration, security, and governance for SAP systems operating across hybrid environments, including both cloud and on-premises platforms. This role is pivotal in maintaining system stability, controlling secure access, ensuring compliance with audits, and enabling smooth integration among SAP applications such as S/4HANA, BTP, Ariba, SuccessFactors, and MDG.

Key Responsibilities

• Oversee SAP Basis administration for S/4HANA and related platforms, including monitoring system performance, tuning, and resolving issues.
• Manage transports, system refreshes, upgrades, patches, and kernel updates to maintain optimal system function.
• Continuously monitor system health metrics, batch job executions, log files, interfaces, RFCs, and database performance.
• Collaborate effectively with infrastructure, cloud, and database teams to ensure system availability and SLA adherence.
• Design and manage SAP security roles and authorizations, enforcing least privilege and segregation of duties (SoD) principles.
• Handle user provisioning, role assignment, and resolve authorization conflicts.
• Conduct regular user access reviews, manage emergency access processes, and oversee remediation actions.
• Provide necessary audit evidence, access reports, and maintain compliance documentation.
• Configure and administer SAP Governance, Risk, and Compliance (GRC) modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Manage SoD rulesets, risk analyses, mitigation controls, and workflow processes.
• Support cloud-based access governance using SAP Identity Access Governance (IAG) for SaaS applications.
• Lead periodic access certifications and coordinate audit remediation efforts.
• Administer SAP Business Technology Platform (BTP) subaccounts, role collections, destinations, and trust settings.
• Configure Identity Authentication Service (IAS) for Single Sign-On (SSO), identity federation, and authentication policies.
• Manage Identity Provisioning Service (IPS) for user and role management within SAP ecosystems.
• Support SAP Work Zone access controls and configuration of launchpad content.
• Oversee security and access control management for SAP MDG, Ariba, and SuccessFactors, ensuring secure cloud and on-premise integration.
• Implement and sustain identity and integration security by designing SSO with SAML 2.0, OAuth, and integrating IAS/IPS.
• Troubleshoot issues related to federation, certificates, tokens, and login failures.
• Maintain compliance with internal security policies, audit requirements, and cybersecurity standards.
• Participate actively in incident, change, and problem management workflows.
• Prepare and maintain comprehensive technical documentation and operational procedures.

Required Skills and Experience

• Extensive SAP Basis and Security administration expertise.
• Proficiency in SAP S/4HANA authorization and role design best practices.
• Practical experience working with SAP GRC Access Control and/or SAP IAG.
• In-depth knowledge of SAP BTP security, including IAS, IPS, and SSO configuration.
• Strong familiarity with integration security protocols such as RFC, OAuth, SAML, and certificate management.
• Thorough understanding of SoD principles, audit controls, and compliance frameworks.
• Experience managing hybrid SAP landscapes encompassing both cloud and on-premises systems.

Preferred Qualifications

• Relevant SAP certifications in Basis, Security, GRC, or BTP.
• Background in large-scale SAP transformation initiatives.
• Experience with SAP Cloud Application Lifecycle Management (ALM) or SAP Solution Manager.

Soft Skills and Leadership

• Demonstrates a leadership mindset to guide teams and vendor partners.
• Effective communicator with stakeholders across business, cybersecurity, and IT domains.
• High degree of accountability and ownership for critical enterprise SAP systems.
• Capable of managing incidents efficiently under pressure.
• Proactively identifies risks and fosters continuous improvement.

Education and Experience

• Bachelor's degree in Information Technology, Computer Science, Engineering, or a related discipline.
• Between 8 to 10+ years of practical experience in SAP Basis and Security roles.
• Strong hands-on involvement with SAP S/4HANA and cloud security implementations.
• Preferred experience in implementing GRC and IAG solutions.