Senior SAP Basis and Security Administration Engineer

• Execute and coordinate day-to-day technical operational interactions with the third-party hosting partner for all SAP ECC 6.0 on HANA Basis activities — driving accountability.
• Support patch, kernel upgrade, and support pack revision update, and system enhancement initiatives following established governance and architecture.
• Work with SAP functional and technical teams to support systems refreshes, client copies, transport management, and landscape maintenance.
• Relentlessly monitor SAP ECC/HANA system performance, verify hosting partner SLAs (performance, availability, response times), and escalate issues to internal leadership when standards slip.
• Perform systems performance analysis and capacity trending. Analyze usage patterns, system headroom, and assist in executing database archiving strategies and capacity plans per lead direction.
• Support disaster recovery planning, testing (backup/restore, HANA system replication/HSR, failover), and validation activities to ensure business continuity readiness.
• Maintain rigorous operational documentation, execution logs, and internal oversight records.

• Maintain and support the SAP authorization concept — roles, composite roles, profiles, and organizational-level restrictions — across the ECC 6.0/HANA landscape in accordance with established security policies.
• Execute user access lifecycle management, including provisioning, de-provisioning, access recertification, and enforcement of least-privilege principles across all clients and environments (Dev/QA/Prod).
• Drive Perform segregation of duties (SoD) analysis and remediation, proactively identifying and resolving conflicting access before it becomes an audit finding, and maintaining a clean SoD ruleset aligned to business risk.
• Support Internal Audit, InfoSec, and external auditors on all SAP security assessments.
• Proactively monitor for anomalous access patterns, dormant accounts, and emerging authorization risk, bringing forward remediation plans before issues are flagged externally.
• Define, document, and enforce SAP security standards, naming conventions, and role-build methodology, ensuring consistency and auditability across the entire authorization landscape.

• Configure and support of interfaces built on SAP PI/PO (IDoc, RFC, SOAP, REST, File adapters), driving configuration, proactive monitoring, and rapid troubleshooting across every SAP-to-third-party connection.
• Support and maintain SFTP-based data exchange processes, including connection monitoring, key/credential management, SSL/TLS certificate updates, and coordinating network/firewall changes with the hosting partner.
• Practical experience on SAP SAML configuration.
• Configure, maintain, and support cloud-based integration agents/connectors (e.g., SAP Cloud Connector or equivalent middleware agents), ensuring a secure, reliable bridge between the hosting partner's ECC environment and cloud/third-party applications.
• Guarantee that integration channels remain secure, thoroughly documented, and resilient against disruption from hosting partner-side changes (e.g., patching, network reconfiguration) — anticipating issues before they impact the business.
• Support enterprise background processing and automated workflows (e.g., SAP Redwood job schedulers).

• 5-7 years of hands-on SAP Basis and security administration experience, including at least 2–3 years in a senior or lead capacity.
• Strong, specific experience with SAP ECC 6.0 on HANA — architecture, transport management, and system landscape design.
• Working knowledge of HANA database administration concepts and SLT.
• Proven ownership of SAP authorization concepts across a large, complex landscape, including experience leading audit responses and access recertification cycles.
• Experience working with SLA management and change governance.
• Experience in executing archiving large tables and overall systems performance tuning.
• Practical experience setting up and maintaining SFTP connections for secure file-based integrations.
• Experience configuring and managing cloud-based integration agents (e.g., SAP Cloud Connector or similar).
• Excellent troubleshooting, analytical, and documentation skills, with the ability to assess hosting-partner-delivered work critically.

• Knowledge of SAP best-practice data archiving strategies (e.g., SARA/archive object configuration, retention policies, and database growth management) to support long-term system performance and storage optimization.
• Experience with enterprise job scheduling systems (e.g., SAP Redwood CPS/BPA).
• Exposure to OpenText solutions (Vendor Invoice Management / VIM, Content Server, or Archive Center).
• Experience with tax system interface maintenance (e.g., Vertex updates/patching).
• Familiarity supporting connections to enterprise cloud integration and analytics tools (e.g., Workato, Palantir connectors, Tableau, Alteryx, BOBJ).
• SAP certification(s) in Basis, Security, or Integration technologies.
• Experience with SAP GRC Access Control (Access Risk Analysis, Emergency Access Management, Access Request Management) and automated access review tools.
• Experience and knowledge in PI/PO a plus,

‎

‎

We are committed to creating an inclusive workplace and welcome applications from people of all backgrounds. We do not discriminate based on any protected characteristic under applicable law.